Threat actors are deploying a new stealer malware named CoinLurker via counterfeit software update alerts. Navigating methods such as direct downloads, malvertising redirects, and compromised WordPress sites, the malware utilises Microsoft Edge Webview2 to execute payload. CoinLurker heavily obfuscates its activities to evade detection and also targets both mainstream and obscure cryptocurrency wallets, harvesting valuable data and credentials, posing a substantial threat to users in the cryptocurrency ecosystem.
Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware
A suspected South Asian cyber espionage threat group, Bitter, has targeted a Turkish defense sector using C++-malware tracked as WmRAT and MiyaRAT. This attack used