CloudSEK threat intelligence advisory on IcedID Banking Trojan Malware that steals financial information. It also acts as a dropper for other malware.

A blind XML External Entity (XXE) injection vulnerability in Wordpress, tracked as CVE-2021-29447 allows authenticated users to steal files.

A recent 0-day, dubbed CVE-2021-30657, is responsible for client-side attack vectors involving malware execution and is being exploited by Shlayer malware.

A post on a cybercrime forum is advertising a service allegedly claimed that it can embed documents with any malicious executables.

A post on a TOR-based private cybercrime dark web forum is advertising the source code of an advanced FUD ransomware, dubbed M3rcury.

A post on a cybercrime forum is advertising the access to multiple VMware vCenter and ESXi servers.

A post on a cybercrime forum is advertising the sale of access from multiple regions including the UK, Canada, US, and Brazil.

A post on a cybercrime forum is advertising NLBrute RDP brute-forcing tool that runs on NLBrute 1.2 and a controlled botnet