The new malware family, PLAYFULGHOST, offers keylogging, screen and audio capture, and remote shell access features. It is spread via phishing emails or by bundling with popular apps. The malware also utilises sophisticated execution techniques such as DLL search order hijacking. Google researchers have provided rules within Google Security Operations to detect this harmful activity.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.