Phishing

Brand impersonating apps request benign permissions and redirect to fake login pages.

Android users across Europe have been targeted with attacks involving a more sophisticated iteration of the DoubleTrouble banking trojan, Infosecurity Magazine reports.

Threat actors have been leveraging link wrapping services for clandestine malware delivery as part of a new phishing campaign aimed at credential exfiltration, reports The Hacker News.

Users of the Python Package Index repository are being targeted by an ongoing phishing scheme redirecting to fraudulent PyPI sites that facilitate credential pilfering activities, The Hacker News reports.

Use of DragonForce ransomware and Snowflake access were among the new tactics.

ActiveX is leveraged to download Epsilon Red ransomware on the victim’s machine.

Attacks spreading the EAGLET information-stealing backdoor have been deployed by the threat operation UNG0901 against aerospace and defense organizations across Russia, according to The Hacker News.