Malware

Windows, macOS, and Linux systems have been targeted with supply chain attacks by a new malicious Python package in PyPi that deploys backdoors and Cobalt Strike beacons.

Threat actors have been leveraging malicious PDF attachments to facilitate the distribution of the Snake Keylogger malware.

North Korean state-sponsored hacking operation Lazarus has been targeting VMware Horizon servers in malware attacks exploiting the Log4Shell remote code execution flaw, tracked as CVE-2021-44228, reports BleepingComputer.

BleepingComputer reports that malware activity from the stealthy Linux trojan XorDDoS has spiked by 254% over the past six months.

Ransomware-related vulnerabilities have increased by 7.6% between the last quarter of 2021 and the first quarter of 2022, with 19 of the 22 new security flaws associated with the Conti ransomware gang, which had expressed support for Russia amid the ongoing war against Ukraine during the previous quarter, VentureBeat reports.

Suspected Russian hacking group Wizard Spider has been operating with a significant arsenal of compromised devices and a complicated but highly distributed workflow, according to ZDNet.

Threat actors have launched a novel SQL server hacking campaign leveraging the built-in utility "sqlps.exe" to facilitate brute-force attacks and SuspSQLUsage malware deployment, The Hacker News reports.