Malware

Chinese state-sponsored threat group Hafnium has targeted telecommunications, data services, and internet services sectors between August 2021 and February 2022 with the new Tarrask malware aimed at establishing persistence on Windows systems, reports The Hacker News.

Seventy-eight of all malware distributed through encrypted connections were evasive zero-days that could evade primary defenses.

Industroyer, previously linked to the Russian actor Sandworm and also tracked as CrashOverride, was first seen in 2016 and was purpose-built to disrupt the energy sector. The new malware, which ESET has dubbed "Industroyer2," was found in Ukranian electrical substations and, if not caught in time, would have deployed on Friday, April 8.

ThreatFabric researchers have discovered the novel Android banking malware dubbed "Octo", which could facilitate on-device fraud.

Tthe novel META info-stealer malware is being spread in a new malspam campaign that seeks to exploit the recent exit of Raccoon Stealer.