Malware

Attackers leveraged help desk impersonation and AI-assisted code in two real-world attacks.

Malicious actors have targeted macOS systems with the CHILLYHELL backdoor, while Windows and Linux systems have been subjected to attacks with the ZynorRAT trojan, reports The Hacker News.

New malware tapped by Chinese APT in Philippine military firm-targeted attack Attacks involving the newly discovered EggStreme fileless malware framework have been launched by a Chinese advanced persistent threat group against a military firm in the Philippines amid growing territorial disputes in the South China Sea, according to The Hacker News.

Overlay intrusions, cryptocurrency wallet-targeted account takeovers, NFC relay attacks, and automated money transfers have been facilitated by the newly discovered RatOn Android trojan, reports The Hacker News.

Hackread reports that threat actors have exploited unsecured Docker APIs to facilitate the distribution of new malware that prevents external API access while deploying system control tools, marking an evolution from an earlier attack campaign discovered by Trend Micro that exploited such APIs for cryptocurrency mining malware delivery.

The Luno botnet, identified by Cyble Research and Intelligence Labs, demonstrates advanced features such as process masquerading, self-update systems, and robust obfuscation techniques.

Threat actors have been looking to covertly take over Windows systems in a new phishing campaign involving the novel MostereRAT trojan, Infosecurity Magazine reports.