A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
An alleged crypto scammer posing as Coinbase support stole $2M using social engineering according to investigator ZachXBT.