Malware

HackRead reports that the widely used coding tool Prettier Code formatter has been spoofed on the VSCode Marketplace to enable Anivia Stealer malware injections on Windows systems as part of an attempted Brandjacking attack.

Illicit Blender 3D files tapped to deliver StealC V2 infostealer Russia-linked threat actors have been using trojanized .blend files on CGTrader and other platforms to facilitate the distribution of the StealC V2 information-stealing malware as part of an attack campaign that has been ongoing for at least six months, according to Infosecurity Magazine.

Information-stealing payloads are being spread via bogus Windows update screens as part of a new ClickFix attack campaign that has targeted organizations in the U.S., EMEA, and Asia-Pacific and Japan regions between Sep. 29 and Oct. 30, according to The Register.

AhnLab Security Intelligence Center discovered that attackers exploited the WSUS flaw to gain access to servers, using PowerCat for a shell and deploying ShadowPad via certutil and curl.

More environments could be covertly targeted by versions 4 and 5 of the Python-based XillenStealer malware, which has been strengthened to become an extensive data harvesting platform, reports GBHackers News.

Novel RadzaRat Android trojan examined Android devices could be clandestinely subjected to keylogging, remote file management, and surveillance through the novel RadzaRat trojan, which spoofs a legitimate file manager app, according to Cybernews.

BleepingComputer reports that attacks spreading the newly discovered BadAudio malware have been launched by the China-nexus APT24 threat group as part of a three-year cyberespionage campaign aimed at Windows systems.

The Sturnus trojan, identified by Dutch cybersecurity firm ThreatFabric, is designed to steal banking credentials through convincing fake login screens and gain remote control over infected devices.