Malicious Package

Overview s3transferss is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...

Malicious code in webssockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33218237eb5a89cad81db80c5bb65d594f15f397071a0fca8e21c53f63885b75 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in oslana (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bb40e313e0aad9679cad1aa82959c54505635b5811a7b6f2fe5d50246c8b4c2a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in bitcoinlb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 08f28ede88a534affb6529e42bf03984c49de6b3c72f33d64ed077a6b49fff55 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocomprae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e29fff7df870f353d6a62a0418b0904f02fabe855f4df6a2f0e613e81a299fc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptoocmpare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4b4fb759944ed94ff7bd30a6f9c873f8730832efd6861333ec5be981c29be111 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocompaare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b8d52bf563ad0cbe859cadc80ea21b12a8e22d37b87a483f8febb81715725396 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqtrdae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 00af430369b40053498cb47de85ddabe14d385320c3d7a74c7fc3380bb22ee57 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in frqetrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1bc75e2a39c7f2eae7fcda876f4a91a60c46b9a6a6fdf0636c9d176ed2c85e0d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in frqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e9a6f5c4e1499c80fad35d26f4e88bc0da564817b89bc70ca6aade3721002c8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

A Hackers Pot of Gold: Your MSP's Data

A single ransomware attack on a New Zealand managed service provider MSP disrupted several of its clients' business operations overnight, most belonging to the healthcare sector. According to the country's privacy commissioner, "a cyber security incident involving a ransomware attack" in late...

Sydney Man Sentenced for Blackmailing Optus Customers After Data Breach

A Sydney man has been sentenced to an 18-month Community Correction Order CCO and 100 hours of community service for attempting to take advantage of the Optus data breach last year to blackmail its customers. The unnamed individual, 19 when arrested in October 2022 and now 20, used the leaked...

Malicious Package

Overview methantiafk is a malicious package. It distributes Discord malware hosted on GitHub, that can steal important host information and credentials. Remediation Avoid using all malicious instances of the methantiafk package. References - Injected Code Credit: Snyk Research Team...

Canteen Management System SQL注入漏洞

Canteen Management System is a canteen management system. version 1.0 of Canteen Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by parameter id. An attacker could use this vulnerability to execute illegal SQL commands to...

PT-2023-14735 · Ezeip · Ezeip

Name of the Vulnerable Software and Affected Versions: ezEIP version 5.3.00649 Description: The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a website,...

Warning: Hackers Actively Exploiting Zero-Day in Fortra's GoAnywhere MFT

A zero-day vulnerability affecting Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Details of the flaw were first publicly shared by security reporter Brian Krebs on Mastodon. No public advisory has been published by Fortra. The vulnerability is ...

Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

Two new security weaknesses discovered in several electric vehicle EV charging systems could be exploited to remotely shut down charging stations and even expose them to data and energy theft. The findings, which come from Israel-based SaiFlow, once again demonstrate the potential risks facing th...

Experts Warn of 'Ice Breaker' Cyberattacks Targeting Gaming and Gambling Industry

A new attack campaign has been targeting the gaming and gambling sectors since at least September 2022, just as the ICE London 2023 gaming industry trade fair event is scheduled to kick off next week. Israeli cybersecurity company Security Joes is tracking the activity cluster under the name Ice...

Prilex PoS Malware Evolves to Block Contactless Payments to Steal from NFC Cards

The Brazilian threat actors behind an advanced and modular point-of-sale PoS malware known as Prilex have reared their head once again with new updates that allow it to block contactless payment transactions. Russian cybersecurity firm Kaspersky said it detected three versions of Prilex 06.03.808...

Forget Heart Message Box SQL注入漏洞

Forget Heart Message Box is a messaging website. v1.1 of Forget Heart Message Box is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the name parameter of ca.php. An attacker could use this vulnerability to execute illegal SQL commands to ste...