Malware

Emotet botnet operators have updated their malware to include a new credit card stealer module targeted at stealing credit card information stored in Google Chrome alone, BleepingComputer reports.

ZDNet reports that cybercriminals have been spending a median dwell time of 15 days inside compromised networks in 2021, compared with 11 days in 2020, indicating a prolonged duration for performing malicious activities without being detected.

Threat actors have launched new phishing campaigns spreading the SVCReady malware since April, reports The Hacker News.

BleepingComputer reports that Qbot affiliate TA570 has been exploiting the yet-to-be-addressed critical Windows zero-day flaw dubbed "Follina" and tracked as CVE-2022-30190 in phishing attacks distributing the Qbot malware.

Chinese-speaking advanced persistent threat group LuoYu has been leveraging man-on-the-side attacks to deliver the malicious WinDealer backdoor, reports The Hacker News.

SecurityWeek reports that initial access brokers and ransomware-as-a-service groups have been forging stronger relationships with each other.

Symantec researchers estimated that Clipminer botnet operators were able to exfiltrate at least $1.7 million discovered across 4,375 cryptocurrency wallet addresses, according to SecurityWeek.