Latest cybersecurity reporting from selected sources.

Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist

Newly identified malicious campaigns are linked to virtual private servers modified by APT28 to operate as malicious DNS servers

A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment

A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access codes

New LOSTKEYS malware has been identified and linked to COLDRIVER by GTIG, stealing files and system data in targeted attacks

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

Recorded Future details a novel campaign that abuses legitimate internet services to deploy multiple malware variants for credential theft

Microsoft has warned of a long-running credential stealing campaign from Russia’s APT28

Threat group APT29 is using secrets stolen in an earlier attack to compromise Microsoft’s internal systems

The routers were hijacked to steal credentials, proxy traffic, and host phishing pages and custom tools

Russian-linked Anonymous Sudan claims to have stolen credentials

One allegedly used stolen funds to help set up the crypto exchange

The findings come from Secureworks' Counter Threat Unit

Mobilization, migration and infrastructure issues hit fraudsters hard

Hackers discussed how to use stolen payment cards and bypass geo controls and SMS limitations

Info-stealing malware infected nearly one million devices in 2022

APT group focused on classic data theft via email accounts

Armorblox warns of new campaign using Russian domain