For individuals

Cyberattacks were disclosed by some Ukrainian state-owned critical infrastructure entities, including oil and gas firm Naftogaz, transport safety agency DSBT, national postal service provider Ukrposhta, and state railway Ukrzaliznytsia, according to The Record, a news site by cybersecurity firm Recorded Future.

Mexican enterprises subjected to AllaKore RAT attacks Agriculture, banking, capital goods, commercial services, manufacturing, public sector, retail, and transportation companies across Mexico with annual revenues exceeding $100 million have been targeted with attacks deploying the AllaKore RAT malware to facilitate banking credential and authentication data exfiltration since late 2021, reports The Record, a news site by cybersecurity firm Recorded Future.

Spear-phishing attacks deployed by Chinese state-sponsored threat operation APT10 also known as Stone Panda, Cicada, Bronze Riverside, Potassium, Earth Tengshe, and MirrorFace involved the distribution of continuously updated iterations of the LODEINFO fileless backdoor, first identified in November 2022, The Hacker News reports.

FortiGuard Labs said the new FAUST strain can maintain persistence in a network and create multiple threads for efficient execution.

The threat actor went more than half a decade before being discovered — thanks to a remarkable backdoor delivered in invisible adversary-in-the-middle attacks.

Threat actors created and abused OAuth apps to access Microsoft's corporate email environment and remain there for weeks.

It's unclear if the attacks — which hit oil and gas, postal service, transport safety, and railway organizations in the nation — were related.