The Register reports that nearly 10,000 code samples of the DarkTortilla crypter have been uploaded to VirusTotal during the course of 16 months, signifying the continued rapid evolution of the .NET-based crypter.
Instant messaging platform Discord is being converted by 12 malicious PyPi packages into an information-stealing backdoor facilitating web browser- and Roblox-stored data exfiltration, reports BleepingComputer.
North Korean state-sponsored APT group Lazarus has launched a cyberespionage campaign leveraging fraudulent Coinbase job postings in an effort to infect Apple- and Intel-based systems with macOS malware, according to Threatpost.
BleepingComputer reports that BlackByte ransomware has reappeared to promote a new Tor data leak site that features similar extortion techniques as the LockBit ransomware operation.
More threat actors have used disk-wiping malware in cyberattacks since the beginning of the ongoing war between Russia and Ukraine, with Ukrainian government, military, and private entities having been targeted with at least seven new major wiper variants, according to VentureBeat.
TechRepublic reports that industrial facilities were targeted by 32% of all USB-based cybersecurity threats this year, with USB-based malware attacks against the industry rising from 37% in 2021 to 52% in 2022.
