Malware

VexTrio cybercrime network supported by malicious apps Multiple nefarious apps purporting to be device tracking tools, VPNs, spam blockers, and dating services on official Google and Apple app stores have been developed by malicious ad tech provider and cybercrime network VexTrio Viper to facilitate illicit cyber activity, according to The Hacker News.

CERT-UA discovered a series of attacks aimed at state authorities, the Defense Forces, and defense-industrial enterprises in Ukraine.

A report from Insikt Group has uncovered fresh infrastructure linked to spyware maker Candiru, indicating ongoing spyware operations tied to DevilsTongue malware, reports The Record, a news site by cybersecurity firm Recorded Future.

Microsoft's novel prototype autonomous artificial intelligence agent Project Ire has shown promise in identifying malware within software files, reports SecurityWeek.

More than 15,000 fraudulent websites impersonating TikTok Shop have been leveraged to facilitate the deployment of information- and cryptocurrency-stealing malware, as well as spyware, as part of the global ClickTok scam campaign, Cybernews reports.

Widespread Android targeting conducted by novel PlayPraetor trojan Over 11,000 Android devices, particularly in Portugal, Spain, France, Morocco, Peru, and Hong Kong, have been injected with the newly emergent PlayPraetor remote access trojan, which has a Chinese command-and-control panel, reports The Hacker News.

More than 4,000 IP addresses worldwide have been compromised by Vietnamese threat actors in attack campaigns involving the Python-based PXA Stealer malware, resulting in the theft of over 200,000 credentials, more than 4 million browser cookies, and hundreds of credit card records, The Hacker News reports.