Malware

Malware, phishing facilitated by novel MatrixPDF toolkit Ordinary PDF files could be transformed into stealthy phishing lures resulting in malware injections or credential compromise through the newly emergent MatrixPDF phishing and malware distribution toolkit, reports BleepingComputer.

The loader, fully written in assembly language, is claimed to be fully undetectable.

Updated DarkCloud infostealer emerges HackRead reports that a new VB6-based version of the DarkCloud information-stealing malware has been launched to compromise a manufacturing organization's browser information, cryptocurrency, and contacts as part of a phishing campaign this month.

Organizations around the world particularly manufacturing, government, and healthcare entities across India, the U.S., France, Italy, and Brazil have been subjected to attacks spreading the EvilAI malware under the guise of fake artificial intelligence-enhanced tools, The Hacker News reports.

The campaign, which originated on Facebook, leverages compromised brand accounts.

GBHackers News reports that Oracle WebLogic servers, small office home office routers, Linux devices, and CMS platforms have been targeted by a novel botnet loader-as-a-service campaign to facilitate the distribution of Mirai-like bots over the past six months, with attack volumes increasing by 230% from July to August.

Threat actors have been spreading bogus invoice emails with malevolent Office files to facilitate XWorm RAT infections on Windows systems as part of a new phishing campaign, HackRead reports.