Malware

New Arkanix infostealer discovered Newly emergent Arkanix information-stealing malware has been under accelerated development to facilitate extensive data theft for financially motivated threat actors, according to GBHackers News.

The campaign, active between September 30, 2024, and March 18, 2025, targeted sectors including engineering, local government, manufacturing, technology, transportation, utilities and universities.

An attacker could distribute a malicious Skill that quietly retrieves external scripts.

Threat actor infiltrated devices via browser extensions, quietly making money for years until they finally were outed.

Malware has been spread in a recent update of the widely used open-source SmartTube YouTube client for Android TV after its developer's signing keys were compromised last week, reports BleepingComputer.

Windows systems are being targeted with the advanced KimJongRAT malware linked to North Korean state-sponsored advanced persistent threat operation Kimsuky via malicious HTA files, according to GBHackers News.

BleepingComputer reports that two dozen new VSCode packages on the Microsoft Visual Studio Marketplace and OpenVSX including prettier-vsc.vsce-prettier, clangdcode.clangd-vsce, flutcode.flutter-extension, bphpburn.icons-vscode, and yamlcode.yaml-vscode-extension have facilitated the distribution of the Glassworm malware in a third wave of attacks following the containment of initial infections.