Malware

The group sent emails from purported job seekers with a malicious archive attached.

GBHackers News reports that the newly emergent CastleBot malware-as-a-service framework, which has ramped up activity since May, has enabled the distribution of a plethora of malicious payloads, including information-stealing malware and other ransomware-linked backdoors.

Bogus Firefox crypto wallet extensions pilfer more than $1M More than $1 million worth of cryptocurrency has been exfiltrated via over 150 counterfeit crypto wallet extensions on the Mozilla Firefox marketplace as part of the sweeping GreedyBear cybercrime campaign, Hackread reports.

Experts call the takedown a win for defenders, but effective prosecutions must follow.

The malware brute forces WordPress sites to upload and spread the trojan.

The group behind the attack uses malicious browser extensions, malware, and fake websites.

The attack chain begins with phishing emails containing TAR, RAR or 7Z attachments.

TDS services tapped by SocGholish malware operators Intrusions involving the SocGholish malware, also known as FakeUpdates, have been facilitated by the TA569 threat operation, also known as Mustard Tempest, Gold Prelude, Purple Vallhund, and UNC1543, through traffic distribution systems Parrot TDS and Keitaro TDS, according to The Hacker News.