Malware

Vulnerability lets threat actors drop malware into the Windows Startup folder.

PeckBirdy leverages JScript and living-off-the-land binaries (LOLBins) to execute across various environments.

Indian government entities have been targeted in two sophisticated cyberattack campaigns, codenamed Gopher Strike and Sheet Attack, by a threat actor operating from Pakistan.

The updated CoolClient malware, deployed via legitimate software from Sangfor, refines existing features like system profiling, keylogging, and tunneling.

Malware spread through eScan antivirus supply chain compromise Infosecurity Magazine reports that MicroWorld Technologies' update infrastructure has been compromised to deliver malicious updates for its eScan antivirus software that spread multi-stage malware as part of a global supply chain compromise.

Tools used to protect users in the aftermath of Shai-Hulud may no longer work, security pros say.

Stanley is concerning because it functions as a full-featured service, with the most expensive version claiming to guarantee that malicious apps will pass the Chrome Web Store's security checks.

The campaign employs a sophisticated attack chain, beginning with a ZIP file containing hidden malicious files.