Malware

A novel email-based system is used to retrieve commands from the attacker’s C2 server.

Google and Check Point have partnered to disrupt the "YouTube Ghost Network" that exploited legitimate YouTube accounts to spread information-stealing malware through tutorials for installing cracked software or game cheats, The Register reports.

Pakistan-linked threat operation Transparent Tribe, also known as APT36, has targeted Indian government organizations' Linux-based systems with the new DeskRAT malware as part of a cyberespionage campaign that commenced in June, Infosecurity Magazine reports.

Chinese state-backed threat operation UNC5221 has leveraged the sophisticated Brickstorm backdoor to stealthily compromise U.S. cybersecurity firm F5 for over a year, resulting in the exposure of the company's source code, according to Cybernews.

Malware’s rich feature set expected to have broader appeal to threat actors.

Two-pronged approach leveraged by Bitter APT in new backdoor intrusions HackRead reports that novel tactics have been leveraged by South Asian advanced persistent threat operation Bitter to compromise government, military, and power utility entities in China and Pakistan with information-stealing malware.

The popular stealer was completely rewritten in C and adds greater efficiency and stealth.