Malware

Illicit actors have begun utilizing dropper apps to deploy SMS stealers and spyware payloads in addition to banking trojans following Google's measures to prevent app sideloading in select countries, The Hacker News reports.

Chinese advanced persistent threat group Silver Fox has tapped Microsoft-signed drivers to covertly install the modular ValleyRAT backdoor, reports Infosecurity Magazine.

Edge devices and Microsoft products were the most common targets for exploitation.

Open-source digital forensics and incident response tool Velociraptor has been exploited to remotely compromise a targeted network, GBHackers News reports.

Threat actors have been exploiting Microsoft Teams to facilitate malware delivery as part of new phishing attack campaigns, according to Infosecurity Magazine.

Anthropic's Claude harnessed in data extortion scheme NBC News reports that at least 17 companies, including several healthcare providers, a financial entity, and a defense contractor, had been compromised and extorted as part of a ransomware attack campaign that involved the exploitation of Anthropic's Claude artificial intelligence chatbot.