Malware

Intrusions deploying the Stealerium information-stealing malware have escalated from May to August following an over a year-long lull, reports ITPro.

Campaign targets various vertical sectors in multiple NATO-based countries.

HackRead reports that intrusions involving a bogus AnyDesk installer and Windows search have been deployed to facilitate MetaStealer malware compromise as part of a new campaign combining the ClickFix and FileFix techniques.

Experts say once an endpoint gets cryptojacked, attackers can follow-up by stealing credentials, secrets, and sessions.

Novel covert MystRodX backdoor examined Advanced stealth has been exhibited by the newly emergent MystRodX backdoor, also known as ChronosRAT, reports The Hacker News.

North Korean hacking collective Lazarus Group has deployed the multi-platform PondRAT, ThemeForestRAT, and RemotePE malware strains as part of a social engineering attack campaign against a decentralized finance organization, The Hacker News reports.

The UPX-compressed and PyInstaller-packed grabber exfiltrates to the attacker’s Discord.

BleepingComputer reports that numerous domains have been leveraged by threat actors to deliver the fraudulent AppSuite PDF Editor app containing the TamperedChef information-stealing malware as part of a potentially far-reaching attack campaign that began in late June.