Matanbuchus Malware Evolves to Bypass AV Defenses by Swapping Core Components

Matanbuchus is a malicious C++-based downloader that has been sold as Malware-as-a-Service (MaaS) since 2020. Initially known as a simple loader for second-stage payloads, it has steadily evolved into a flexible backdoor platform that is increasingly t…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

The Google Threat Intelligence Group (GTIG) warns that nation-state actors and financially motivated threat actors are exploiting a…

·

backdoor, Carpathian, cybersecurity, Google, GTIG, Malware, Poison Ivy, RomCom, Russia, Security, Stockstay, vulnerability, WinRAR

¶¶¶¶¶

GoTo Resolve Tool’s Background Activities Compared to Ransomware Tactics

New research from Point Wild’s Lat61 team reveals how the HEURRemoteAdmin.GoToResolve.gen tool allows silent, unattended access to PCs. Learn why this legitimate remote administration software is being flagged as a security risk and its surprising conn…

·

Cyber Attack, cybersecurity, GoToResolve, Lat61, Malware, Security, vulnerability

¶¶¶¶¶

Cybercriminals Leverage AI-Generated Malicious Job Offers to Spread PureRAT Malware

A Vietnamese threat actor is using AI-authored code to power a phishing campaign that delivers the PureRAT malware and related payloads, leveraging realistic job-themed lures to compromise corporate systems. The campaign, first documented by Trend Micr…

·

AI, cyber security, Cyber Security News, Malware

¶¶¶¶¶

Phantom Malware in Android Game Mods Hijacks Devices for Ad Fraud

Another day, another Android malware strain. This time, Phantom malware (aka Android.Phantom) is targeting users who install third-party gaming apps from unofficial sources.

·

Android, Click Fraud, cybersecurity, Doctor Web, Fraud, gaming, Malware, MODS, Phantom, SCAM, Scams and Fraud, Security, TROJAN

¶¶¶¶¶

16 Fake ChatGPT Extensions Caught Hijacking User Accounts

A coordinated campaign of 16 malicious GPT optimisers has been caught hijacking ChatGPT accounts. These tools steal session tokens to access private chats, Slack, and Google Drive files.

·

ChatGPT, Chrome, Cyber Attack, cybersecurity, Extension, Fraud, GhostPoster, LayerX, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

Attackers Hijack GitHub Desktop Repo to Spread Malware via Official Installer

Threat actors have successfully exploited a design flaw in GitHub’s fork architecture to distribute malware disguised as the legitimate GitHub Desktop installer. The attack chain begins with a deceptively simple but effective technique. Attackers…

·

cyber security, Cyber Security News, GitHub, Malware

¶¶¶¶¶

US Charges 31 Suspects in Nationwide ATM Jackpotting Scam

US prosecutors have charged 31 more suspects in a nationwide ATM jackpotting scam, bringing the total number of defendants to 87 across multiple states.

·

ATM Jackpotting, Cyber Attack, Cyber Crime, cybersecurity, Fraud, Jackpotting, Malware, Tren de Aragua, Venezuela

¶¶¶¶¶

Poland Thwarts Russian Wiper Malware Attack on Power Plants

Poland blocked a Russian wiper malware attack on power and heating plants, officials say, avoiding outages during winter and prompting tighter cyber rules.

·

APT44, Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Russia, Seashell Blizzard, Security, Unit 74455

¶¶¶¶¶

New Fake CAPTCHA Scam Abuses Microsoft Tools to Install Amatera Stealer

Another day, another fake CAPTCHA scam, but this one abuses Microsoft’s signed tools.

·

Amatera Stealer, Captcha, cybersecurity, Google Calendar, Infostealer, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware

Matanbuchus Malware Evolves to Bypass AV Defenses by Swapping Core Components

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

GoTo Resolve Tool’s Background Activities Compared to Ransomware Tactics

Cybercriminals Leverage AI-Generated Malicious Job Offers to Spread PureRAT Malware

Phantom Malware in Android Game Mods Hijacks Devices for Ad Fraud

16 Fake ChatGPT Extensions Caught Hijacking User Accounts

Attackers Hijack GitHub Desktop Repo to Spread Malware via Official Installer

US Charges 31 Suspects in Nationwide ATM Jackpotting Scam

Poland Thwarts Russian Wiper Malware Attack on Power Plants

New Fake CAPTCHA Scam Abuses Microsoft Tools to Install Amatera Stealer