The Transparent Tribe APT has evolved its lures, expanded its victimology and added a new malware family to its arsenal.
The newly disclosed Moriya rootkit has been used since at least 2018 in a campaign targeting large regional diplomatic organizations in Asia and Africa.
Cybercriminals have rewritten the Buer malware loader in the Rust programming language, in an attempt to avoid detection.
Researchers shed light on the FiveHands ransomware, which was deployed after a threat group exploited a now-patched SonicWall flaw in January.
A threat campaign is relying on cross-site scripting attacks to deliver malware to and steal credentials from online shops.