Summary: New FakeUpdate malware campaigns are being run by cybercrime groups TA2726 and TA2727, which primarily target macOS users with a new infostealer called FrigidStealer. The malware also encompasses Windows and Android payloads, making its reach extensive. Threat actors utilize malicious JavaScript displaying fake browser update messages to deceive users into executing harmful downloads.
Affected: macOS, Windows, Android users
Keypoints :
- TA2726 and TA2727 collaborate in deploying FrigidStealer alongside other malware for various operating systems.
- FakeUpdate campaigns exploit web vulnerabilities to trick users into downloading malicious files disguised as updates.
- FrigidStealer targets sensitive data, extracting cookies, login credentials, and financial information from users’ machines.
Views: 13