A budding cybercriminal, dubbed Coquettte, has been using a Russian bulletproof hosting provider, Proton66, to distribute malware disguised as legitimate antivirus tools, according to threat intelligence firm DomainTools. The amateur hacker is also allegedly running websites that sell guides for manufacturing illegal substances and weapons. This threat actor is believed to be loosely associated with a larger hacking group known as ‘Horrid’, which functions as an incubator for aspiring or amateur cybercriminals.

Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT
Cybersecurity researchers have highlighted the ongoing risk posed by XorDDoS, a distributed denial-of-service malware that has targeted the US in 71.3% of attacks from November