SEXi, AI Dreams, Powerhost, Acuity, Layerslider, JSOutProx, Byakugan, Josh Marpet, and More, on this edition of the Security Weekly News.

BleepingComputer reports that phishing attacks with an updated JSOutProx remote access trojan variant have been deployed against financial entities in South and Southeast Asia, the Middle East, and Africa.

Organizations in the oil and gas industry have been targeted with a phishing campaign that involved the deployment of a new Rhadamanthys information-stealing malware variant, The Hacker News reports.

Proofpoint researchers say new malware aligns with trend by cybercriminals to find more creative ways to bypass defenders.

Organizations in Italy, Sweden, and Poland have been targeted by expanded attacks with the Mispadu banking trojan, also known as URSA, as part of an ongoing campaign that originally targeted financial, commercial, automotive manufacturing, and service entities, as well as law firms across Latin America, The Hacker News reports.

BleepingComputer reports that Google has been working on curbing browser cookie theft with the new Device Bound Session Credentials functionality in Chrome as it prepares to remove third-party cookies from the browser.

Cyberthreat operation Earth Freybug, which is a subset of Chinese state-sponsored threat group APT41, has leveraged the novel UNAPIMON malware with API unhooking to facilitate stealthier intrusions against organizations from different industries around the world, The Hacker News reports.