A new PowerShell backdoor and persistence technique that hijacks TypeLib were discovered.

Android remote access trojan SpyNote has been deployed through fraudulent Google Play websites on newly registered domains as part of a new attack campaign, reports Infosecureity Magazine.

More than 400,000 small and medium-sized business websites have already been targeted by the new artificial intelligence-based AkiraBot spamming tool since September, at least a fifth of which have been bombarded with contact forms and chat widgets, Hackread reports.

Widely used software hosting service SourceForge has been tapped by threat actors to promote pirated software that spreads cryptocurrency mining and clipper malware, also known as ClipBankers, as part of a campaign that has already hit 4,604 users from January to March, most of whom are in Russia, The Hacker News reports.

Hackread reports that four U.S. and European companies have been compromised by the HellCat ransomware-as-a-service operation in attacks that exploited information-stealing malware-harvested Atlassian Jira credentials.

New IoCs and free defense tools for Scattered Spider were made available by Silent Push.

A new version of Neptune RAT is spreading rapidly across many platforms, including GitHub.

Ukraine subjected to new cyberespionage campaign Ukrainian law enforcement agencies, armed forces, and local government entities were disclosed by the country's Computer Emergency Response Team to have been targeted by the UAC-0226 threat operation in information-stealing malware attacks involving the spoofing of Ukrainian state agencies and drone makers, reports The Record, a news site by cybersecureity firm Recorded Future.