Malware operators are mimicking copyright infringement claims to trick their targets into unknowingly downloading malicious files, researchers at Cisco Talos have found. The ongoing scam, primarily focussed in Taiwan, emails victims with phishing emails containing malware attachments, posed as legal notices from copyright holders. The malware, identified as LummaC2 or Rhadamanthys, steals account credentials and personal information from the victims’ computers. Cisco Talos reported difficulty attributing the attack due to the operators’ obfuscation techniques.

Critical Microsoft Telnet 0-Click Vulnerability Exposes Windows Credentials
A critical vulnerability in Microsoft Telnet Server allows remote attackers to bypass authentication entirely, gaining administrative access without credentials. Affecting legacy Windows systems (2000 through