ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

This weekly cybersecurity roundup describes numerous active threats and events: malicious NuGet packages and fake GitHub repositories distributing spyware and a Windows infostealer; trojanized installers delivering Starland RAT, WLDR agent, and other backdoors; the Spirals Rust-based ransomware rapidly spreading in a South Asian IT firm's network; CISA-listed actively exploited vulnerabilities; large-scale fraud and money-laundering operations disrupted in Europe; EDR-evasion techniques using Windows bind links; widespread phishing campaigns abusing RMM tools and OAuth/device-code phishing toolkits; and mapping of thousands of threat infrastructure servers. The report emphasizes active exploitation, significant financial impact, and operational scale, and recommends patching, tightening defaults, and validating software handoffs.