Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

Spyware masquerading as modified versions of Telegram have been spotted in the Google Play Store that's designed to harvest sensitive information from compromised Android devices. According to Kaspersky security researcher Igor Golovin, the apps come with nefarious features to capture and...

Spyware Vendor Hacked

A Brazilian spyware app vendor was hacked by activists: In an undated note seen by TechCrunch, the unnamed hackers described how they found and exploited several security vulnerabilities that allowed them to compromise WebDetetive’s servers and access its user databases. By exploiting other flaws...

Malicious code in mx-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27c2bd463fb6e635283a0919ef523ad0109af9ed2731351db6548bc4364f858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c7d62771b1341c44056f7cec5b608c648b04216c5c24f57a57f3ea4e86a574a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-eth-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e13be402ee9d4db3c195949098b1f824dd7c443db3326421128b4d211aa41a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in b2b-canaisdigitais (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dc971b04d6b1823268396807c41d808cc18fd8c2b2094b5c9ee6fb342083172 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in fca-chand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af03b2a119d8eb7ca4a3cff46b7d0cb89e8f3393071411044aec8320b19740b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hamlit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce9dac66892a9767b3f04fe73b5e116a60654a3eed3c9ea1098b06527e6ac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Stalkerware Vendor Hacked

The stalkerware company LetMeSpy has been hacked: TechCrunch reviewed the leaked data, which included years of victims call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared litt...

OpenSSH trojan campaign targets Linux systems and IoT devices

Poorly configured Linux and Internet of Things IoT devices are at risk of compromise from a cryptojacking campaign, according to researchers at Microsoft. The attacks, which involve brute forcing a way into a system, are designed to profit from mining in illicit fashion for cryptocurrency. Once t...

Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assets-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0980e797c7e6db1bd06873799b54350dd781176d8a2e104a7301a51053e3991b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in ejs-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6005ef8f32d3d8160fb459ec4f885c273bd8721ab0becf21fe4d27accdf4d21d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in react-router-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329da6645c0b4c1b67bd28d5bc5b0cde6725f995276a8a0e93bed30b180921ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wagmi-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 897ea7598e9700b92a7273c617cf3ae2dfeed4a7557e9c604742cd38b16fc08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Addresses High-Stakes Chrome Zero-Day Vulnerability

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google tackles Chromes zero-day CVE-2023-3079 vulnerability, which is related to a weakness in the Chrome V8 JavaScript engine. It poses a significant threat by allowing attackers to execute...

Malicious code in eslint-plugin-artsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

A new botnet called Dark Frost has been observed launching distributed denial-of-service DDoS attacks against the gaming industry. "The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices," Akamai security...

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

A new botnet called Dark Frost has been observed launching distributed denial-of-service DDoS attacks against the gaming industry. "The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices," Akamai security...

Malicious code in react-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46729b2313e52604631a44fbc0c9a6e4dea2ce5ceb901b05e055a389bfcdf8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...