An updated version of the EagerBee backdoor malware is being used against ISPs and government entities in the Middle East, according to Kaspersky researchers. The new variant, which was previously deployed against Southeast Asian organizations, adds several advanced features to improve its stealth and evasion capabilities. Kaspersky attributes the malware to Chinese threat group CoughingDown, which has previously collaborated with other state-backed Chinese groups. EagerBee is designed to seamlessly integrate with normal system operations, making it difficult to identify and analyze.

Hackers are selling counterfeit phones with crypto-stealing malware
Kaspersky has identified thousands of low-cost Android smartphones sold online that come with preinstalled malware programmed to steal cryptocurrency details. The devices are infected with