Malware

Tools used to protect users in the aftermath of Shai-Hulud may no longer work, security pros say.

Stanley is concerning because it functions as a full-featured service, with the most expensive version claiming to guarantee that malicious apps will pass the Chrome Web Store's security checks.

The campaign employs a sophisticated attack chain, beginning with a ZIP file containing hidden malicious files.

The attack begins with a deceptive CAPTCHA prompt, i.e. ClickFix, tricking users into manually executing a command via the Windows Run dialog.

Malicious actors have been using fake CAPTCHA verification pages to facilitate malware deployment, reports Cyber Security News.

Windows systems in South Korea have been compromised with MoonPeak malware in advanced intrusions involving the exploitation of LNK files, according to GBHackers News.

Amnesia RAT, ransomware spread in new Russia-targeted phishing campaign Attacks with Amnesia RAT and ransomware have been deployed against Russian users as part of a novel multi-stage phishing campaign, reports The Hacker News.

BleepingComputer reports that intrusions with an AI-generated PowerShell malware have been launched by North Korean hacking operation Konni, also known as TA406 and Opal Sleet, against blockchain developers and engineers across the Asia-Pacific.