Roundup cites infostealers, malicious packages and ClickFix as rising malware trends
Original title: 9 rising malware trends every security pro should know
Immersive says Lumma Stealer, StealC and RisePro now account for 75% of stolen credentials sold for initial access.
A CSO roundup, drawing on Immersive, Huntress, ExtraHop and SentinelLABS, describes growth in infostealers, malicious developer packages and ClickFix lures. Named examples include Shai-Hulud abusing CI/CD release pipelines, an Axios maintainer compromise, and an April ClickFix chain ending in NetSupport RAT. After action against LockBit, RansomHub and Akira are described as favoring smaller, targeted extortion.
Unconfirmed: The 75% credential figure and several trend claims are attributed to vendors and are not independently verified in the article.
- Shai-Hulud stole CI/CD secrets and hijacked GitHub Actions OIDC tokens.
- The Axios case inserted a malicious dependency through a maintainer's credentials.
- An April ClickFix lure led to CastleLoader, NetSupport RAT and a .NET stealer.
- RansomHub and Akira are said to prefer targeted theft and extortion over broad encryption.
- Healthcare is described as a leading ransomware target.
Impact: Stolen credentials, CI/CD secrets and data used for extortion
- 1.Harden endpoint policies against users running PowerShell from ClickFix-style prompts.
- 2.Watch NPM, PyPI and Hugging Face for malicious packages in developer toolchains.
- ATT&CK
- T1539 Steal Web Session CookieT1195.002 Compromise Software Dependencies and Development ToolsT1059.001 PowerShellT1204 User Execution
- Products
- NPMPyPIHuggingFaceGitHub Actions
- Organizations
- ImmersiveHuntressExtraHopSentinelLABS
From the original article
8 min read at csoonline.com
Malware is evolving rapidly, driven by advances in AI and changes in computing infrastructures. Security professionals must continuously educate themselves on these trends to defend against increasingly sophisticated threats. The traditional game of cat and mouse between security attackers and defenders has got fiercer with fresh techniques evolving and older less effective approaches falling out of fashion.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.