Dossier
custom malware
Coverage of custom malware in the Nexus archive.
- SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two vulnerabilities in SonicWall SMA1000 were exploited in zero-day attacks for weeks, enabling threat actors to install custom malware on vulnerable VPN appliances. The flaws were recently disclosed but were used before patches were available.
- Crime crew impersonates help desk, abuses Microsoft Teams to steal your data
A previously unknown threat group is using Microsoft Teams chat invitations and helpdesk staff impersonation to deploy custom Snow malware in data-stealing attacks, as reported by Google's Threat Intelligence Group.