Malware

Researchers say e-commerce stores running the outdated Magento 1 e-commerce platform were targeted via SQL injection and PHP object injection attacks.

Numerous malware strains, including Smokeloader, Vidar, and Redline, have been executed using the PrivateLoader pay-per-install loader since last May.

VMware research says 89% of cryptojacking attacks use XMRig-related libraries and 50% of Cobalt Strike users may be cybercriminals.

Since its emergence in September 2020, the Mac trojan UpdateAgent has evolved from a basic information stealer to become a second-stage payload distributor observed in various attacks last year, now also capable of hosting its payloads in the public cloud.

Researchers say attackers can use the bugs in the Unified Extensible Firmware Interface (UEFI) to launch code execution with system management mode privileges.

Examples of cyber criminals utilizing multi-factor authentication (MFA) tokens and authenticator apps is a growing trend, according to one cybersecurity expert.