Malware

The campaign, discovered on January 26, 2026, involved sponsored Google search results for "mac cleaner" utilities.

The campaign begins with users being tricked into installing a dropper app named TrustBastion, which masquerades as a security tool.

Over 454,600 new harmful software packages, which were cumulatively downloaded 9.8 trillion times, have been discovered across major repositories like PyPI, Hugging Face, NuGet, Maven Central, and npm, last year, according to The Cyber Express.

AI-powered code has been leveraged by a Vietnamese threat actor to deliver PureRAT malware and other illicit payloads as part of a fake job phishing campaign initially discovered by Trend Micro in December, reports GBHackers News.

The malicious code was concealed within a Basque language dictionary file, disguised as a compressed archive.

TA584's current attack chain begins with emails sent from compromised accounts via SendGrid and Amazon SES.

The Lat61 Threat Intelligence Team at Point Wild discovered that this software can be installed silently and maintain a persistent presence within a hidden folder.

The U.S. Justice Department has disclosed charges against 31 more individuals in connection with a large ATM jackpotting conspiracy that used Ploutus malware to steal cash from machines across the country, according to The Record, a news site by cybersecurity firm Recorded Future.