organization · 3 records
Elastic Security Labs
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials
A Brazilian banking malware operation named KREMLIN uses malicious browser extensions to steal credentials and session tokens from Chrome and Edge users.
1 outlet
Chaos ransomware group uses msaRAT to route traffic through headless browsers
Researchers at Cisco Talos detailed msaRAT, a post-compromise Rust implant used by the Chaos ransomware group to route command-and-control traffic through headless Chrome and Edge browsers.
1 outlet
North Korean hackers use fake coding tests to distribute malware
North Korean threat actors linked to the Contagious Interview campaign are using steganographic SVG images in fake coding tests to deliver OtterCookie-aligned malware targeting software developers.
1 outlet