Malware

A relatively unknown cryptomining malware dubbed "Rarog" is giving cybercriminals a relatively affordable way for entry level exploitation.

Three leading cybersecurity research teams separately released reports today about recent malicious cryptomining activity -- one revealed the compromise a major ad platform, another analyzed an emerging malware that infected at least 166,000 users worldwide, and a third focused on a large crop of Android-based miners.

The malicious actors behind Cryptomix ransomware have pushed out a new variant, with the primary change being the inclusion of a new extension and minor alterations to the contact info and ransom note.

Researchers from Proofpoint last week revealed that they have discovered a new exploit builder kit that has been used by the sophisticated Cobalt Gang cybercriminal group, as well as other attackers who have used it to spread malware including banking trojans and remote access trojans.

Brute force attacks are being used to compromise Magento sites to scrape payment card data and deliver cryptomining malware.

CareFirst BlueCross BlueShield said one of its employees fell victim to a phishing attack that led to thousands of its members' personal information being exposed.