Backdoors

Malicious Wallpaper Engine downloads on Steam Workshop are distributing infostealers, backdoors, and account-hijacking malware targeting Steam gamers. The malware exploits anime-themed wallpapers to steal cryptocurrency and other sensitive data.

A developer fell victim to a sophisticated job scam involving a realistic-looking website, video interviews, and malicious code disguised as a technical test. The scam began with a LinkedIn message and used social engineering tactics to trick the victim into executing harmful code.

The ThreatsDay Bulletin highlights a $290M DeFi hack, macOS Living Off the Land (LotL) abuse, ProxySmart SIM farms, and 25 new security incidents. Recurring vulnerabilities in supply chains and system-level attacks are emphasized, with attackers exploiting unpatched bugs and unmonitored packages.

A previously undocumented China-linked APT group named GopherWhisper has infected 12 Mongolian government systems using Go-based backdoors and loaders. ESET, a Slovakian cybersecurity firm, identified the group's tools and attack methods in a recent report.

Iranian media alleges the US employed backdoors and botnets to disable networking equipment during the ongoing war. Chinese state media is amplifying these accusations.

Over 100 malicious Chrome extensions in the Web Store are stealing Google OAuth2 Bearer tokens and deploying backdoors. These extensions pose significant security risks through ad fraud and data theft activities.

Dozens of WordPress plugins were compromised to distribute malware after being sold to a new corporate owner. The attack affected thousands of websites using these plugins.