New Cyberthreat 'Boolka' Deploying BMANAGER Trojan via SQLi Attacks

New Cyberthreat 'Boolka' Deploying BMANAGER Trojan via SQLi Attacks. Threat actor Boolka compromises websites with malicious scripts, delivering a modular trojan codenamed BMANAGER. Malicious JavaScript collects and exfiltrates user inputs and interactions, redirects to bogus loading page, drops downloader for BMANAGER trojan, based on the BeEF framework. BMANAGER serves as a conduit to deploy four additional modules and sets up persistence on the host. Boolka is the third actor leveraging SQL injection attacks to steal sensitive data