Categoria: Malware

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware

chinese-apt-‘phantom-taurus’-targeting-organizations-with-net-star-malware

Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks.

The post Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware appeared first on SecurityWeek.

New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions

new-xcsset-macos-malware-variant-hijacks-cryptocurrency-transactions

The malware now uses a four-stage infection chain, has an additional persistence mechanism, and also targets Firefox browser data.

The post New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions appeared first on SecurityWeek.

SonicWall Updates SMA 100 Appliances to Remove Overstep Malware

sonicwall-updates-sma-100-appliances-to-remove-overstep-malware

The software update includes additional file checks and helps users remove the known rootkit deployed in a recent campaign.

The post SonicWall Updates SMA 100 Appliances to Remove Overstep Malware appeared first on SecurityWeek.

Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions

turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions

Turla malware was deployed in February on select systems that Gamaredon had compromised in January.

The post Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions appeared first on SecurityWeek.

CISA Analyzes Malware From Ivanti EPMM Intrusions

cisa-analyzes-malware-from-ivanti-epmm-intrusions

Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.

The post CISA Analyzes Malware From Ivanti EPMM Intrusions appeared first on SecurityWeek.

Infostealers: The Silent Smash-and-Grab Driving Modern Cybercrime

Competition among malware-as-a-service developers has transformed infostealers into refined, accessible tools for cybercriminals worldwide.

The post Infostealers: The Silent Smash-and-Grab Driving Modern Cybercrime appeared first on SecurityWeek.

PromptLock: First AI-Powered Ransomware Emerges

Proof-of-concept ransomware uses AI models to generate attack scripts in real time.

The post PromptLock: First AI-Powered Ransomware Emerges appeared first on SecurityWeek.

Anatsa Android Banking Trojan Now Targeting 830 Financial Apps

The Anatsa Android banking trojan has expanded its target list to new countries and more cryptocurrency applications.

The post Anatsa Android Banking Trojan Now Targeting 830 Financial Apps appeared first on SecurityWeek.

Microsoft Dissects PipeMagic Modular Backdoor

PipeMagic, which poses as a ChatGPT application, is a modular malware framework that provides persistent access and flexibility.

The post Microsoft Dissects PipeMagic Modular Backdoor appeared first on SecurityWeek.

SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack

SonicWall advises organizations to patch SMA 100 appliances and look for IoCs associated with Overstep malware attacks.

The post SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack appeared first on SecurityWeek.