Over 18k devices worldwide have had sensitive data stolen due to intrusions involving a trojanized XWorm RAT builder. The attackers used the aliases “@shinyenigma” and “milleniumrat” to target amateur threat actors. The altered XWorm RAT builder enables data theft, registry alteration, and virtualization checks via Telegram bot tokens and API calls. The attack follows the usage of XWorm by Russian hackers in Ukraine-targeted attacks.
M&S issues update as crippling nationwide IT outage still ongoing – The Sun
Marks & Spencer (M&S) halted online orders in the UK and Ireland following a cyber attack, leading to a 5% drop in share price. Physical
