Malware

Novel ChaosBot backdoor examined Attackers have compromised a financial services firm's environment with the newly emergent ChaosBot backdoor late last month, The Hacker News reports.

Malware uses public GitHub repos to store configuration files and redirection instructions.

TechCrunch reports that Israeli spyware firm NSO Group has been purchased by a U.S. investment group led by Hollywood producer Robert Simonds in a deal reportedly worth tens of millions of dollars.

HackRead reports that bogus game and VPN installers have been leveraged to compromise Windows systems with the updated Stealit information-stealing malware, which now exploits Node.js's Single Executable Application feature to bypass detection.

Malicious email attacks involving JavaScript-concealed malware have surged during the third quarter, HackRead reports.

Intrusions weaponizing the open-source monitoring tool Nezha have been conducted by suspected Chinese threat actors to facilitate Gh0st RAT injections, The Hacker News reports.

More Russian state-backed threat actors were noted by Ukraine's Computer Emergency Response Team to be deploying artificial intelligence-powered cyberattacks to infiltrate the country's increasingly robust cybersecurity defenses, according to The Record, a news site by cybersecurity firm Recorded Future.

Newly emergent Shuyal Stealer malware could pilfer login credentials from 19 different web browsers, including Google Chrome, Microsoft Edge, Opera and Opera GX, Epic, Waterfox, Vivaldi, and Yandex, GBHackers News reports.