Two-pronged approach leveraged by Bitter APT in new backdoor intrusions HackRead reports that novel tactics have been leveraged by South Asian advanced persistent threat operation Bitter to compromise government, military, and power utility entities in China and Pakistan with information-stealing malware.
Operations of the PolarEdge botnet which was previously noted to have targeted Asus, QNAP, and Synology routers, as well as resemble an Operational Relay Box network were discovered to either involve functioning as a TLS client for remote file downloads or on-the-fly configuration modifications, The Hacker News reports.
The Caminho loader, of Brazilian origin, employs spearphishing tactics with business-themed social engineering to target victims in regions like Brazil, South Africa, Ukraine, and Poland.
Doxing campaign crashes Lumma infostealer activity Activity of the Lumma information-stealing malware, also known as LummaC2, has sharply declined amid an underground doxing campaign that exposed the five alleged primary members of the operation, which is also tracked as Storm-2477 and Water Kurita, last month, according to SecurityWeek.
Xubuntu, the Ubuntu-based Linux distribution using the Xfce desktop environment, had its downloads page compromised to deliver cryptocurrency-stealing malware, The Register reports.
BleepingComputer reports that the novel self-propagating GlassWorm malware has been injected into a dozen OpenVSX and Microsoft VSCode extensions, which have been downloaded 35,800 times, as part of an ongoing supply chain intrusion.
