Almost 30 malicious VPN apps with proxyware enabled by a Golang library allowed Android devices to perform as residential proxies that could be leveraged for illicit cyber activity as part of the PROXYLIB operation, reports The Hacker News.

Industrial, manufacturing, financial, trading, travel, and government organizations in the U.S., Mexico, Colombia, Brazil, Argentina, Dominican Republic, Spain, and Portugal have been targeted with new attacks by the TA588 cybercrime operation distributing the Venom RAT malware, The Hacker News reports.

Threat actors have been leveraging malicious ads and websites to facilitate ongoing information-stealing malware attacks against macOS devices, The Hacker News reports.

BleepingComputer reports that more advanced features and increased stealth have been added to the updated Vultur Android banking trojan, which is being distributed via hybrid attacks.

Malware first identified in 2014 re-emerges and gets delivered by the criminal proxy service Faceless, now growing at 7,000 users per week.

TechCrunch reports that an investigation into a credential stealing malware campaign has been commenced by major videogame developer Activision Blizzard following claims of malware infections from the usage of cracked software.

Several Russian companies have been subjected to intrusions exploiting the already-patched WinRAR vulnerability, tracked as CVE-2023-38831, by the PhantomCore cyberespionage operation, which has been linked to Ukraine, reports The Record, a news site by cybersecurity firm Recorded Future.

China, Turkey, Taiwan, and Uzbekistan have been targeted with attacks deploying a Linux variant of the C++-based DinodosRAT malware since October, according to The Hacker News.