The Hive ransomware operation has converted their VMware ESXi Linux encryptor to the Rust programming language and added new features to make it harder for security researchers to snoop on victim's ransom negotiations.
...
The IPStorm botnet, which was first spotted targeting Windows systems last year, has quadrupled in size to reach 13,500 infected systems - and is now targeting Linux, Android and Mac devices.
The infamous FinSpy spyware has returned - and is now targeting Linux and macOS users. FinSpy is being used in new campaigns targeting dissident organizations in Egypt.
Lucifer malware emerged a few months ago as a typical Windows malware. However, it has now returned with greater power and new capabilities - enabling it to target Linux systems.