Malware

Western European IT and software development firms have been compromised with the GPUGate malware as part of a sophisticated attack campaign involving Google Ads and bogus GitHub commits that has been underway since December, reports The Hacker News.

The Lazarus Group, known for its sophisticated cyberattacks, has been targeting individuals seeking cryptocurrency-related job opportunities.

LunaLock targeted the website Artists&Clients, demanding a $50,000 ransom from victims under the threat of leaking stolen data and incorporating it into AI training datasets.

Threat actor TAG-150 has advanced its CastleLoader malware operations with the development of a pair of CastleRAT trojan variants enabling system data exfiltration, command execution, and further payload deployment, The Hacker News reports.

The phishing campaign involved SVG files embedded with hidden JavaScript, creating fake login pages for the Colombian Fiscalía General de la Nación.

GBHackers News reports that the XWorm remote access trojan has become even stealthier with its utilization of seemingly legitimate filenames resembling apps in a recent attack campaign.

More cybercriminals have been utilizing the Vidar information stealer in attacks this year due to the malware's low barrier of entry, SiliconANGLE reports.

Intrusions deploying the Stealerium information-stealing malware have escalated from May to August following an over a year-long lull, reports ITPro.