Security researchers are investigating a sophisticated malware attack that uses a combination of techniques, including geofencing and multi-layered obfuscation, to deploy different types of malware based on a victim’s geographical location. US-based victims are targeted with the XWorm Remote Access Trojan, while victims outside the US are targeted with the Rhadamanthys information stealer. The hackers initiate the attack chain through scheduled tasks or fake CAPTCHAs.

CBI arrests hacker for targeting Delhi Jal Board customers using malware | Delhi News
Indian cyber hacker Bittu Kumar has been arrested by the Central Bureau of Investigation (CBI) for running a malware scam using the Delhi Jal Board