Artificial intelligence has been used to create a new malicious npm package impersonating the "NPM Registry Cache Manager" that includes a clandestine cryptocurrency wallet drainer that could compromise Windows, Linux, and macOS systems, reports The Register.
Hackread reports that malicious actors have begun using malicious Windows shortcut files to distribute the Remcos RAT malware as part of a new attack campaign.
Android users across Europe have been targeted with attacks involving a more sophisticated iteration of the DoubleTrouble banking trojan, Infosecurity Magazine reports.
Threat actors have been leveraging link wrapping services for clandestine malware delivery as part of a new phishing campaign aimed at credential exfiltration, reports The Hacker News.
Users of the Python Package Index repository are being targeted by an ongoing phishing scheme redirecting to fraudulent PyPI sites that facilitate credential pilfering activities, The Hacker News reports.