Malware

Novel covert MystRodX backdoor examined Advanced stealth has been exhibited by the newly emergent MystRodX backdoor, also known as ChronosRAT, reports The Hacker News.

North Korean hacking collective Lazarus Group has deployed the multi-platform PondRAT, ThemeForestRAT, and RemotePE malware strains as part of a social engineering attack campaign against a decentralized finance organization, The Hacker News reports.

The UPX-compressed and PyInstaller-packed grabber exfiltrates to the attacker’s Discord.

BleepingComputer reports that numerous domains have been leveraged by threat actors to deliver the fraudulent AppSuite PDF Editor app containing the TamperedChef information-stealing malware as part of a potentially far-reaching attack campaign that began in late June.

Illicit actors have begun utilizing dropper apps to deploy SMS stealers and spyware payloads in addition to banking trojans following Google's measures to prevent app sideloading in select countries, The Hacker News reports.

Chinese advanced persistent threat group Silver Fox has tapped Microsoft-signed drivers to covertly install the modular ValleyRAT backdoor, reports Infosecurity Magazine.

Edge devices and Microsoft products were the most common targets for exploitation.