The attackers who previously breached and abused the website of free multimedia editor VSDC to distribute the Win32.Bolik.2 banking Trojan have now switched their tactics. While previously they hacked legitimate websites to hijack download links infected with malware, the hackers are now creating website clones to deliver banking Trojans onto unsuspecting victims' computers. This allows them to focus on adding capabilities to their malicious tools instead of wasting time by trying to infiltrate the servers and websites of legitimate businesses. More to the point, they are actively distributing the bank Win32.Bolik.2 banking Trojan via the nord-vpn[.]club website, an almost perfect clone of the official nordvpn.com site used by the popular NordVPN VPN service. The cloned website also has a valid SSL certificate issued by open certificate authority Let’s Encrypt on August 3, with an expiration date of November 1. "Win32.Bolik.2 trojan is an improved version of Win32.Bolik.1 and has qualities of a multicomponent polymorphic file virus," state the Doctor Web researchers who spotted the campaign. "Using this malware, hackers can perform web injections, traffic intercepts, keylogging and steal information from different bank-client systems." The operators behind this malicious campaign have launched their attacks on August 8, they are focusing on English-speaking targets and, according to the researchers, thousands have already visited the nord-vpn[.]club website in search of a download link for the NordVPN client. "The actor is interested in English speaking victims (US/CA/UK/AU). However, he can make exceptions if the victim is valuable," Doctor Web malware analyst Ivan Korolev told BleepingComputer.  To learn more please visit OUR FORUM.

Ubisoft continues to build upon Tom Clancy's Rainbow Six Siege, soon securing its next major expansion. Following Operation Phantom Sight, the update is headed to the Latin American underworld, falling midway through its fourth year of content.  Two new resourceful Operators lie on the horizon of Operation Ember Rise, set to shake up how defenders lock down the objective. We've wrapped up everything we know so far about the Rainbow Six Siege's next season, ahead of its August 18 unveiling. Ubisoft has dropped its first teaser image for Year 4 Season 3, confirming the coming update's title, Operation Ember Rise. While Ubisoft is yet to outline its Operation Ember Rise release plans, a late-summer launch is expected for Xbox One, PlayStation 4, and PC. As with prior Rainbow Six Siege updates, the third season of 2019 drops two new playable Operators, expanding the ever-growing roster to 50 recruits. Outlined in Ubisoft's Year 4 roadmap, the latest members span independent counterterrorism units (CTUs), hailing from Mexican and Peruvian specialist forces. Expect new attacking and defending talent, sticking to a familiar seasonal template. While Ubisoft hasn't formally unveiled its upcoming Latin duo, brief teasers have surfaced throughout Year 4. Promotional assets for ringleader Harry "Six" Pandey left reference to narcotics crackdowns, singling cartel activity in each Operator's home turf. Addressing a "Crosscheck w/ Capitao anti-drug operations for common ground" and "Antiquities trafficking," it establishes a clear future expansion beyond existing lore. The same pinboard also dropped tease of Operation Phantom Sight's Nøkk and Warden, alongside remaining threads still to uncover. For more complete details along with dates, more images and a video clip visit OUR FORUM.