FakeUpdate malware campaigns are increasingly becoming muddled, with two additional cybercrime groups tracked as TA2726 and TA2727, running campaigns that push a new macOS infostealer malware called FrigidStealer. #TA2726 #TA2727 #CyberCrime www.bleepingcomputer.com/news/securit...
Fake update lure delivering FrigidStealer via Safari (left) and Chrome (right).
This blog also details #FrigidStealer, a new info stealer for Mac computers delivered alongside malware for Windows and Android hosts.
#TA2727 was recently observed delivering this malicious downloader executed by the click of a fake “Update” button on a compromised website.
Proofpoint identified and named two new cybercriminal threat actors: #TA2726 and #TA2727.
These groups operate components of web inject campaigns, including those using fake update-themed lures commonly known to be distributed by #TA569 #SocGholish.
