Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Google on Wednesday said it obtained a temporary court order in the U.S. to disrupt the distribution of a Windows-based information-stealing malware called CryptBot and "decelerate" its growth. The tech giant's Mike Trinh and Pierre-Marc Bureau said the efforts are part of steps it takes to "not...

New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware, new findings from Kaspersky reveal. The latest activity, which commenced on April 4, 2023, has primarily targeted users in Germany, Argentina, Italy, Algeria, Spai...

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...

Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

A Chinese state-sponsored threat activity group tracked as RedGolf has been attributed to the use of a custom Windows and Linux backdoor called KEYPLUG. "RedGolf is a particularly prolific Chinese state-sponsored threat actor group that has likely been active for many years against a wide range o...

Beware of Fake Facebook Profiles, Google Ads Pushing Sys01 Stealer

By Deeba Ahmed The researchers have been tracking the malware campaign since November 2020. This is a post from HackRead.com Read the original post: Beware of Fake Facebook Profiles, Google Ads Pushing Sys01 Stealer...

Malicious code in esqtoolvisaram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c96f70a121a08fa5e02be5a893c229900a5baa973a6bf212ca7d42e0e62a8e65 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppingcpuget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 44f7f6f5e18044f0d0d5d65b6d0f770a3416dc6e3a1a3044c47c1dfceeaa37c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libvisaurlgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7022d9361bd612cb02ae1a34b04c0f6ca12e7827f7fe92f9c2d6f17d63b8274e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcraftremc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 37242320195526775b5312603a837b8e987348677ea211c3c15dd45ddfca50b3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

ChromeLoader Malware Targeting Gamers via Fake Nintendo and Steam Game Hacks

A new ChromeLoader malware campaign has been observed being distributed via virtual hard disk VHD files, marking a deviation from the ISO optical disc image format. "These VHD files are being distributed with filenames that make them appear like either hacks or cracks for Nintendo and Steam games...

ChromeLoader Malware Targeting Gamers via Fake Nintendo and Steam Game Hacks

A new ChromeLoader malware campaign has been observed being distributed via virtual hard disk VHD files, marking a deviation from the ISO optical disc image format. "These VHD files are being distributed with filenames that make them appear like either hacks or cracks for Nintendo and Steam games...

Malicious code in tppaypaledcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e3069d579c1c705eab8bdaf3bb65b38f972ce2a854bf080061899a8b1c682fb5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-lgtbgrandpull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22093db11d23e4faf870d0277d8ff2c7d227fdbcbec4abb3d63d255d046428d7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpencodevmrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e7155774b4d49f41981ba347a437f8b1c900ba325f35f5f0b0c7e74416a6130c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-intpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 95af03f361402bbd732eae09d4df4330347ea6d290d959b2f0d9a63eececf0bd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqkillcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffd2b914c339db5c5b2622c5d0a2139eb3dda689295a4d83c231eaf7eefa40da EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqstringpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b0821a004262c92cf228b4d52a408acc7d3215a8758d95b5e818360462c908b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in paypalpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx db13f12b3af58eb3d0fb9477e73851a73ea8ee4a0f1b2790f5c9d91f0c07c4d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in reproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7db1b33e1ef9fb347caa634e014f541143c0e7f7a50fc58d4afcf51fe977f726 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...