Malware

The U.S. Department of Justice has unveiled charges against French-Venezuelan cardiologist Moises Luis Zagala Gonzalez, who has been accused of developing and selling the Thanos and Jigsaw v.2 ransomware tools, according to The Record, a news site by cybersecurity firm Recorded Future.

Fraudulent Binance non-fungible token mystery box bots are being promoted on YouTube as part of a new campaign aimed at distributing the RedLine malware, BleepingComputer reports.

Threat actors have created a fake version of the Pixelmon non-fungible token website under pixelmon[.]pw, which then spreads that Vidar malware with cryptocurrency wallet-exfiltrating capabilities, according to BleepingComputer.

Iranian advanced persistent threat group OilRig, also known as Cobalt Gypsy, Helix Kitten, and APT34, has attacked a Jordanian diplomat with a malicious Excel document deploying the new Saitama backdoor, reports SecurityWeek.

BleepingComputer reports that Windows and Linux servers are being infected by cryptomining malware by a new Sysrv botnet variant, tracked as Sysrv-K, which has been abusing security flaws in WordPress and the Spring Framework.

Malicious actors could avail of a malware toolkit with customizable modules through the Eternity Project malware-as-a-service, according to BleepingComputer.

Cybercriminals have been leveraging the simple KurayStealer password-stealing malware builder to launch attacks targeted at Discord users, Threatpost reports.