Threat Source Newsletter (April 8, 2021)
Summary: Cisco Talos reported multiple malware campaigns spreading through chat and gaming platforms such as Discord and Slack as more people worked from home during the COVID-19 pandemic. Talos also described a new cryptor, built on Visual Basic 6 with shellcode and process injection, hidden in files users download to install video game cheats and mods, and disclosed out-of-bounds write vulnerabilities in the Accusoft ImageGear library that a malicious file could trigger.
What you should know: The distribution channels here are the ones employees use casually and often outside security review - Discord, Slack, and game mod downloads - and the cryptor's Visual Basic 6 obfuscation is specifically noted as a challenge for analysts unfamiliar with that language.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026