The Hacker News reports that a malicious npm package called imgdecode is part of the MALFEX campaign targeting Windows systems. The package hides a loader in a Windows native addon and can download encrypted shellcode from GitHub, then inject it into a new dllhost.exe process. Windows users should avoid untrusted npm packages and check what software they install from developer tools and command lines.
Source: thehackernews.com
…
Malwarebytes Labs reports that Google has released Chrome 155.0.8059.79/.80 for Windows, and the update fixes 37 security flaws, including seven rated Critical. The easiest option is to let Chrome update automatically, but if the browser has not closed in a while or an extension blocks the update, open About Google Chrome and relaunch after checking for updates.
Source: malwarebytes.com
SecurityWeek reports that Darktrace found a new malware campaign spreading a Rust-based RAT called CikaBika Bot through document-themed lures. Victims get a PDF with a Windows shortcut that opens a decoy document and launches hidden PowerShell to run the malware, which can steal system information, take screenshots, and exfiltrate data through Discord and Ngrok. Windows users should avoid opening unexpected PDF or Word-themed files.
Source: securityweek.com
Malwarebytes Labs reports that Microsoft’s October Patch Tuesday fixes 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Windows users should install the latest updates in Windows Update, restart if prompted, and check again until the system says it is up to date.
Source: malwarebytes.com
