Researchers revealed that the new Phoenix keylogger is gaining traction among cybercriminals on underground web forums. They also found new attack campaigns distributing Cyborg and Maze ransomware. Two backdoors, including one capable of targeting Windows and Linux systems, had a busy week as well. Researchers at Cisco Talos spotted multiple malware campaigns that relied on custom droppers to deliver their payloads. Most H1 2019 Phishing Campaigns used Shade Ransomware as Payload in the first half of 2019.”]