Malware

Aeternum C2, developed in C++, operates by writing commands into smart contracts on the Polygon blockchain.

Steaelite allows cybercriminals to control victims’ machines through a single browser panel.

The attackers create fake Next.js projects, a popular JavaScript framework, and host them on platforms like Bitbucket.

SURXRAT is sold through a Telegram channel, with two licensing tiers: a Reseller Plan for a one-time payment of $200,000 and a Partner Plan for $500,000.

UnsolicitedBooker, a China-aligned threat actor active since at least March 2023, has deployed two distinct backdoors, LuciDoor and MarsSnake, in recent cyberattacks.

Financially motivated threat operation GrayCharlie, which overlaps with SmartApeSG, has leveraged compromised WordPress sites belonging to U.S. law firms to deploy the NetSupport RAT, Stealc, and SectopRAT payloads as part of a supply chain attack campaign, reports GBHackers News.