Latest cybersecurity reporting from selected sources.

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

A new malware campaign targeting Windows and Linux systems has been identified, deploying tools for evasion and credential theft

NVISO discovered new variants of the BRICKSTORM backdoor, initially designed for Linux, on Windows systems

Symantec said Chinese espionage group Daggerfly has updated its malware toolkit as it looks to target Windows, Linux, macOS and Android operating systems

Group-IB also revealed the ransomware uses Chacha20 and RSA-OAEP for encryption

The ELF backdoor, initially thought to be a variant of existing malware, has a Windows and a Linux version

A backdoor in XZ Utils, a widely used file-compressing software in Linux systems, could have led to a critical supply chain attack had a Microsoft researcher not spotted it in time

Cado Security said the malware acts as a botnet and is compatibille with both Windows and Linux

Microsoft said attackers used a patched version of OpenSSH to gain control of compromised devices

According to Unit 42, the variant uses the same AES key as the original Windows PE malware

The flaw reportedly impacted the software on both Windows and Linux systems

The news comes from two different security reports published by SEKOIA and Trend Micro

The malware also reportedly features self-propagating capabilities

The backdoor allowed attackers to upload and download files, execute commands and remove their footprint

Microsoft advised organizations running Windows or Linux on internet-facing systems to take action

Microsoft-discovered vulnerabilities have now been resolved