Researchers analyze faulty new Linux backdoor

Intrusions hijacking the eScan antivirus software's updating mechanism have been conducted by threat actors suspected to be linked to North Korean advanced persistent threat operation Kimsuky to facilitate the delivery of the sophisticated GuptiMiner malware that would then distribute cryptocurrency mining payloads, according to BleepingComputer.

BleepingComputer reports that U.S., Germany, Japan, and UK systems have been subjected to ongoing attacks by suspected Vietnamese hacking group CoralRaider leveraging a content delivery network cache to facilitate the deployment of information-stealing payloads.

The U.S. State Department has subjected more than a dozen individuals allegedly involved in spyware development and distribution, as well as their immediate family members, to visa prohibitions as part of the country's efforts to crack down on spyware misuse, according to The Hacker News.