Numerous websites worldwide have been subjected to SQL injection attacks by newly-discovered threat actor Boolka deploying the modular BMANAGER trojan since 2022, reports The Hacker News. Intrusions involved the distribution of malicious JavaScript code that not only facilitates user input and interaction gathering and exfiltration but also redirects to a fake loading page luring targets to download the BMANAGER trojan downloader as a browser extension, according to a Group-IB analysis.

Source: SC Magazine