Phishing

U.S. organizations have mostly been targeted by a new phishing campaign that harnesses large language models to conceal nefarious payloads within Scalable Vector Graphics files, according to The Hacker News.

The campaign, which originated on Facebook, leverages compromised brand accounts.

Threat actors have been spreading bogus invoice emails with malevolent Office files to facilitate XWorm RAT infections on Windows systems as part of a new phishing campaign, HackRead reports.

The malicious payloads are deployed using stealthy fileless techniques.

Suspected Vietnamese hackers have deployed the PureRAT trojan as part of a phishing campaign that initially involved a basic Python-based information-stealing payload, reports Infosecurity Magazine.

Python Software Foundation warns PyPI users to reset their credentials.

The research by Check Point Research highlights how Nimbus Manticore, also known as MuddyWater, employs sophisticated malware to infiltrate the networks of European companies.

The package fezbox was found to target credentials stored in web cookies.