Phishing

Malware, phishing facilitated by novel MatrixPDF toolkit Ordinary PDF files could be transformed into stealthy phishing lures resulting in malware injections or credential compromise through the newly emergent MatrixPDF phishing and malware distribution toolkit, reports BleepingComputer.

U.S. organizations have mostly been targeted by a new phishing campaign that harnesses large language models to conceal nefarious payloads within Scalable Vector Graphics files, according to The Hacker News.

The campaign, which originated on Facebook, leverages compromised brand accounts.

Threat actors have been spreading bogus invoice emails with malevolent Office files to facilitate XWorm RAT infections on Windows systems as part of a new phishing campaign, HackRead reports.

The malicious payloads are deployed using stealthy fileless techniques.

Suspected Vietnamese hackers have deployed the PureRAT trojan as part of a phishing campaign that initially involved a basic Python-based information-stealing payload, reports Infosecurity Magazine.

Python Software Foundation warns PyPI users to reset their credentials.