Malware

Knockoff cryptocurrency trading apps have been leveraged to distribute the new credential- and crytowallet-targeting JSCEAL V8 JavaScript malware as part of a new malvertising campaign, according to The Hacker News.

North Korean hacking collective Lazarus Group has been lacing open-source packages with advanced malware as part of efforts to escalate its cyberespionage activities, according to SiliconANGLE.

Darktrace says this is the first known instance of an SAP NetWeaver bug with the AutoColor malware.

Attacks involving the new RedHook Android banking trojan have been launched against Vietnamese mobile users as part of a phishing campaign, reports The Cyber Express.

BleepingComputer reports that threat actors attempted to compromise a U.S.-based chemicals firm with an updated version of the Auto-Color Linux backdoor through the abuse of the critical SAP NetWeaver flaw, tracked as CVE-2025-31324, as part of a thwarted attack in late April.

Widely used IT utilities, including PuTTY and WinSCP, have been continuously trojanized to distribute the Oyster backdoor as part of an advanced SEO poisoning campaign initially detected last month, according to GBHackers News.

ArmouryLoader malware examined GBHackers News reports that the ArmouryLoader malware, which was initially discovered to be exploiting ASUS Armoury Crate software last year, has been integrated with sophisticated attack techniques, including payload distribution, privilege escalation, and anti-endpoint detection and response features.

Novel Xred malware deployed via Endgame Gear mouse software exploit GBHackers News reports that Endgame Gear, a German gaming peripheral manufacturer, had users of mice with the OP1w 4k v2 mouse configuration tool downloaded from late June to early July compromised with Xred malware aimed at Windows systems.