TikTok’s latest actions to combat misinformation shows it’s not just a U.S. problem

Talos reports active abuse of Google Cloud Run for high-volume email distribution campaigns delivering banking trojans (Astaroth/Guildma, Mekotio, Ousaban) across Latin America, Europe, and some victims in North America; Talos published ClamAV signatures and Snort rules and notified Google. The newsletter also covers other security headlines — a Polish probe into Pegasus spyware use, the apparent winding down of spyware vendor Variston, and Volt Typhoon’s exfiltration of OT data — and lists recent prevalent malware hashes and filenames as indicators of compromise.