Malware

BleepingComputer reports that threat actors have launched a new malicious campaign involving a fake malware-laced Windows 11 upgrade aimed at exfiltrating cryptocurrency wallets and data from various browsers, including Google Chrome, Brave, Microsoft Edge, Opera, and Vivaldi.

Researchers from Palo Alto Networks' Unit 42 threat intelligence unit have discovered that the SolarMarker malware, also known as Jupyter, has been updated yet again to include improved capabilities to evade detection, The Hacker News reports.

Health-ISAC’s Errol Weiss offered SC Media a behind the scenes look at how the Microsoft-led collaboration enabled the takedown of the ZLoader botnet, and what’s needed to continue disruption of criminal gangs through cross-sector threat sharing.

VentureBeat reports that organizations in the chemical industry have been targeted by the Lazarus advanced persistent threat group in an espionage campaign dubbed "Operation Dream Job," which was first identified in August 2020.

The FBI has announced that North Korean state-sponsored threat groups Lazarus and BlueNorOff, also known as APT38, perpetrated the theft of $620 million in Ethereum from Axie Infinity's Ronin network bridge last month, which is the largest cryptocurrency hack of all time, according to BleepingComputer.

Chinese state-sponsored threat group Hafnium has targeted telecommunications, data services, and internet services sectors between August 2021 and February 2022 with the new Tarrask malware aimed at establishing persistence on Windows systems, reports The Hacker News.