Threat Source newsletter for July 2, 2020
Summary: Cisco Talos reported that the Valak information-stealer now targets Microsoft Exchange servers to steal email logins, using reply-chain attacks that inject a malicious phishing email into an existing email thread, with researchers finding at least 30 variants over six months. Talos also flagged an information leak in Mozilla Firefox and a remote code execution bug in the LEADTOOLS kit, and noted Evil Corp is attacking large corporations with fake job-application documents and a new ransomware called WastedLocker, believed to replace BitPaymer.
Key Takeaway: At least 30 Valak variants in six months means the tooling is being adapted faster than signature-based defenses can track, and its reply-chain technique turns a trusted email thread into the delivery vehicle.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026