Cybercriminals are rapidly rotating lure domains, cloud storage buckets and command-and-control channels, but one infrastructure component is proving far harder to replace: the bulletproof hosting network that delivers the initial fake verification page. Five months of monitoring linked four distinct malware delivery chains to AS202412, operated by OMEGATECH LTD, making the ASN not individual domains […]

The post Cybercriminals Abandon Domains but Keep the Hosting Networks Behind Malware Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor linked to the ongoing Graphalgo software supply-chain campaign has expanded beyond npm and PyPI, using malicious Terraform providers and Go modules to deliver a targeted Go-based remote access trojan (RAT). The activity is significant because it marks the first observed case of malware being distributed through Terraform providers, placing infrastructure-as-code workflows directly […]

The post Graphalgo Malware Uses Malicious Terraform Providers and Go Modules to Deploy RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.