Mastodawn

The JDownloader site was hacked to replace installers with Python RAT malware - trusted download channels can become perfect delivery systems. Verify hashes, not just brands. 🐍⚠️ #SupplyChainAttack #MalwareDelivery

https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/

JDownloader site hacked to replace installers with Python RAT malware

The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found deploying a Python-based remote access trojan.

BleepingComputer

Analyst207 Apr 13

APT37 Exploits Facebook for RokRAT Malware Delivery

North Korean hackers APT37 have cleverly turned Facebook friend requests into a sneaky way to deliver RokRAT malware, exploiting our natural tendency to trust social connections. By accepting a friend request, victims unwittingly open the door to a remote access trojan that can compromise their device.

https://osintsights.com/apt37-exploits-facebook-for-rokrat-malware-delivery?utm_source=mastodon&utm_medium=social

#Apt37 #Rokrat #SocialEngineering #MalwareDelivery #NorthKorea

APT37 Exploits Facebook for RokRAT Malware Delivery

APT37 uses Facebook to deliver RokRAT malware via friend requests. Learn how this North Korean group's social engineering campaign works and protect yourself now.

OSINTSights

ITSEC News Nov 17, 2020

ThreatList: Pharma Mobile Phishing Attacks Turn to Malware - After the breakout of the COVID-19 pandemic, mobile phishing attacks targeting pharmaceutical comp... https://threatpost.com/threatlist-pharma-mobile-phishing-attacks-turn-to-malware/161318/ #mobiledevicemanagement #mostrecentthreatlists #pharmaceuticalcompany #credentialtheft #malwaredelivery #mobilesecurity #mobilephishing #phishingattack #mobiledevice #websecurity #coronavirus #remotework #covid-19 #hacks

ThreatList: Pharma Mobile Phishing Attacks Turn to Malware

After the breakout of the COVID-19 pandemic, mobile phishing attacks targeting pharmaceutical companies have shifted their focus from credential theft to malware delivery.

Threatpost - English - Global - threatpost.com