Malware

Windows, macOS, and Linux systems could be compromised with tailored payloads by the illicit Rust package "evm-units," which impersonates an Ethereum Virtual Machine unit helper tool and has been downloaded more than 7,400 times since April, The Hacker News reports.

New Arkanix infostealer discovered Newly emergent Arkanix information-stealing malware has been under accelerated development to facilitate extensive data theft for financially motivated threat actors, according to GBHackers News.

The campaign, active between September 30, 2024, and March 18, 2025, targeted sectors including engineering, local government, manufacturing, technology, transportation, utilities and universities.

An attacker could distribute a malicious Skill that quietly retrieves external scripts.

Threat actor infiltrated devices via browser extensions, quietly making money for years until they finally were outed.

Malware has been spread in a recent update of the widely used open-source SmartTube YouTube client for Android TV after its developer's signing keys were compromised last week, reports BleepingComputer.

Windows systems are being targeted with the advanced KimJongRAT malware linked to North Korean state-sponsored advanced persistent threat operation Kimsuky via malicious HTA files, according to GBHackers News.