Malware

Widely exploited Remcos RAT malware has gained a new variant integrating real-time surveillance and keystroke transmission capabilities, as well as increased stealth, via modular DLL plugins and encrypted command-and-control channels, Infosecurity Magazine reports.

Google Gemini has been weaponized by the novel PromptSpy malware to ensure persistence in targeted devices, marking the first known use of generative AI in an Android malware, reports The Cyber Express.

Massiv has been observed in campaigns targeting a Portuguese government app linked to the Chave Móvel Digital, Portugal's digital authentication system.

Proofpoint worked with industry partners to take down the TrustConnect MaaS, but it quickly reemerged under a different brand.

OpenClaw, formerly known as Moltbot and ClawdBot, had its ClawHub marketplace compromised with 1,184 illicit skills as part of a sweeping supply chain poisoning intrusion campaign dubbed ClawHavoc, according to GBHackers News.

During a search of the suspect's residence, investigators discovered files containing credentials, passwords, credit card numbers, and server IP addresses, potentially enabling unauthorized access and ransomware attacks.