MSP cybersecurity news digest, April 7, 2025

This intelligence roundup reports multiple active cyber threats: the APT "Earth Alux" (attributed to China) is using Godzilla web shell to deploy VARGEIT and COBEACON backdoors against government, logistics, telecommunications and IT services in APAC and LATAM; INC ransomware claims a data breach at the State Bar of Texas; researchers found an updated Hijack Loader with advanced evasion and persistence features; widespread tax-themed phishing campaigns are delivering RATs and infostealers to thousands of U.S. targets; and a 144GB data leak tied to Royal Mail’s supplier Spectos has been publicly posted. Collectively these incidents show active exploitation, high technical sophistication, and multi-sector impact.