Malware

A volunteer hacker group coordinated by Ukraine successfully disrupted aspects of the Russian alcohol industry by targeting the mandatory government sales tracking service, according to several reports in Russian media outlets.

Threat actors have been stealthily deploying fileless malware by leveraging a novel technique involving the direct injection of shellcode into Windows event logs.

Chinese threat group Moshen Dragon has been targeting antivirus apps to facilitate malicious DLL sideloading.

CyberScoop reports that Twitter may have inadvertently shared users' personal information as a response to a phony emergency request by a threat actor dubbed "Lalartu" or "Sheriff" to target security researchers and bloggers.

MalwareHunterTeam has reported a potential association between the newly-discovered Black Basta ransomware operation, which has already impacted 12 or more companies, and the Conti ransomware group, owing to the groups' similar leak sites, payment sites, and support employee behaviors, according to SecurityWeek.

Russian state-sponsored hacking group APT29, also known as Cozy Bear or Nobelium, has launched spear-phishing campaigns aimed at government and diplomatic organizations in the Americas, Europe, and Asia since January, The Hacker News reports.