Bulletproof Host Stark Industries Evades EU Sanctions
Source: https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/
Senator Urges FTC Probe Into Microsoft After Ascension Ransomware Attack
Source: https://hackread.com/senator-ftc-probe-microsoft-ascension-ransomware-attack/
A sophisticated malware campaign has been uncovered that utilizes various techniques to deliver Remote Access Trojans (RATs) such as XWorm and Remcos. The attack chain begins with a ZIP archive, often hosted on trusted platforms like ImgKit, containing obfuscated BAT scripts. These scripts execute PowerShell-based loaders that inject RAT payloads directly into memory, enabling fileless execution. The campaign also employs SVG files with embedded JavaScript to trigger the malware download, exploiting non-traditional file formats to evade detection. The infection process involves multiple stages, including persistence mechanisms, PowerShell script execution, and the use of loaders to decrypt and deploy the final payload. This evolving threat landscape highlights the need for advanced security measures to counter such sophisticated attacks.
*Today, we have intuitively adapted to Quick Response (QR) codes in the tapestry of our day-to-day life.*
Whether we are scanning the menu at a restaurant or checking in to our flight, they have seamlessly integrated into the consumption of products and information.
Yet, with its widespread adoption, it has also acquired an accompanying security challenge. Bad actors have capitalized on QR codes to perpetrate phishing attacks, deliver malware, and exfiltrate data without the user’s knowledge.
Oftentimes, this is caught after the attack occurs. This is why you should [use a safe online QR code scanner](https://www.qrstuff.com/scan) that authenticates the link before you click on it is so critical.
A malware campaign targeting Chinese-speaking users has been identified, delivering three types of malware: ValleyRAT, FatalRAT, and kkRAT. The campaign uses fake installer pages to distribute the malware.kkRAT, a new Remote Access Trojan, shares similarities with Ghost RAT and Big Bad Wolf. It employs advanced evasion techniques, including sandbox detection and anti-analysis methods. The malware uses the BYOVD technique to disable antivirus and EDR systems.kkRAT's features include clipboard manipulation for cryptocurrency address replacement and deployment of remote monitoring tools. The malware's network communication protocol is similar to Ghost RAT's but with added encryption.kkRAT supports multiple plugins and commands for various malicious activities.
Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware
Source: https://hackread.com/chinese-apt-philippine-military-eggstreme-fileless-malware/
Jaguar Land Rover confirms data theft after recent cyberattack
Source: https://www.bleepingcomputer.com/news/security/jaguar-land-rover-jlr-confirms-data-theft-after-recent-cyberattack/
AdaptixC2, an open-source post-exploitation and adversarial emulation framework, has been observed being used in real-world attacks. This versatile tool allows threat actors to execute commands, transfer files, and perform data exfiltration on compromised systems. Its open-source nature enables easy customization, making it highly flexible and dangerous. The framework supports sophisticated tunneling capabilities, modular design with extenders, and various beacon agent formats. Two infection scenarios were analyzed: one using social engineering via Microsoft Teams, and another likely involving AI-generated scripts. The increasing prevalence of AdaptixC2 in attacks, including its use alongside ransomware, highlights the growing trend of attackers leveraging customizable frameworks to evade detection.
KillSec Ransomware is Attacking Healthcare Institutions in Brazil - Security Affairs
Source: https://securityaffairs.com/182063/cyber-crime/killsec-ransomware-is-attacking-healthcare-institutions-in-brazil.html
New Buterat Backdoor Malware Found in Enterprise and Government Networks
Source: https://hackread.com/buterat-backdoor-malware-enterprise-govt-networks/
US charges admin of LockerGoga, MegaCortex, Nefilim ransomware
Source: https://www.bleepingcomputer.com/news/security/us-charges-admin-of-lockergoga-megacortex-nefilim-ransomware/
