Malware

If we stop publishing POCs, we’ll only wind up disarming ourselves.

Cybernews reports that illicit apps spoofing the widely used cryptowallets Exodus, Trust Wallet, and Ledger Live in the Canonical Snap Store have facilitated the distribution of crypto-stealing malware against Linux users.

The package, named sympy-dev, mimics SymPy, replicating its project description to deceive users.

BleepingComputer reports that the newly emergent sophisticated Linux malware framework VoidLink, which sets sights on cloud environments, has been primarily developed using AI.

The ClickFix variant crashes the user’s browser and instructs them to copy and paste commands to fix the issue.

GBHackers News reports that intrusions spreading the RemcosRAT malware via illegal online gambling-linked tools and counterfeit VeraCrypt installers have been launched against South Korean users.

Illicit VS Code extension delivers multi-stage Evelyn infostealer Attackers have harnessed a malicious Visual Studio Code extension to deliver the multi-stage Evelyn information-stealing malware, reports Cyber Security News.

Newly emergent information-stealing malware SolyxImmortal, which is believed to have been created by a Turkish-speaking threat actor, enables stealthy surveillance and data theft via legitimate APIs and third-party libraries, SecurityWeek reports.