Malware

TrioTech International, a California-based global semiconductor back-end solutions provider offering manufacturing, testing, and distribution services, has disclosed that its Singaporean subsidiary has been compromised in a March 11 ransomware attack, which has been claimed by the Gunra ransomware operation, according to SecurityWeek.

Ransomware gangs act like agile startups — fast, adaptive, and prone to internal fractures.

FBI warns Iran-linked hackers use Telegram as stealthy malware C2, evading detection.

Perseus is distributed through dropper apps found on phishing sites, masquerading as IPTV services to trick users into sideloading them.

Speagle is designed to target only systems equipped with Cobra DocGuard, a document security and encryption platform.

The attack utilizes a fake extension disguised as a legitimate tool for the R programming language, named "reditorsupporter.r-vscode-2.8.8-universal" to mimic a popular extension.

The campaign typically begins with a phishing email containing a malicious ZIP file.

Threat actors could exploit Android's LSPosed framework to alter system-level processes, including the runtime environment, and covertly compromise mobile payment apps, according to Infosecurity Magazine.