MalwareBytes researchers discovered that the Colibri malware loader leveraged to distribute the Vidar information stealer has been using a "simple but efficient approach" to establish persistence.
Threat actors have been leveraging the new traffic direction system dubbed Parrot, which depends on servers hosting 16,500 websites, in the FakeUpdate campaign that uses fake browser update notices to distribute remote access trojans.
The U.S. Treasury Department has imposed sanctions against the State Research Center of the Russian Federation Central Scientific Research Institute of Chemistry and Mechanics, or TsNIIKhM, for its involvement in the development of the Trisis malware, also known as Triton.
Lab52 researchers discovered that a new Android spyware application impersonating a "Process Manager" service has been communicating with infrastructure previously associated with Russian hacking group Turla in an effort to exfiltrate sensitive information.
In the Security News for this week: Ransomware that was a breeze, getting an eyeful while charging your electric vehicle, scanning for secrets, find my iPhone is useful, WTF Apple moments and why I run Linux, Wyze is not very wise, stopping teen hackers, ranking endpoint detection, & more!
Armorblox researchers say threat actors using WhatsApp combine social engineering, brand impersonation, exploiting a legitimate domain, and replicating daily business email to launch a trojan on a victim’s system.
BleepingComputer reports that several new exploits have been added to the Mirai-based distributed denial-of-service botnet Beastmode, or B3astmode, three of which target different Totolink router models.
