Malicious code in cvcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 44aff36bffde706bedf714ac5e35e958309070f1287396eb9d0ecdf82bcbbfc5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in vmcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c11bbc18eed90a16c9f97af431f82f876a541a8d4087d436495e6a195f4c4ee1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in adtool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f436d5728a487d656e09b37a7ac94e5a921d61478013ddba51ce3085e1c5051c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in mccandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0376f57495716c3ea0357035d1a3e9777ec7cd1b71d78b94a92a48cdef045263 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in getram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8d5d21848d2608aba15edc113b4904518635403486dae3054ff0fc83838517aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in minetool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1c12543fcb5f39e1a68c00716d52066596e65134cee7ff85a88ddc18faecf4e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 11b2e9af1eb662f0ff7dab0c9f520fb6762e534f5cc64ed45212226d9a07c5e3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pywurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fec0f9cbb8341fe259d3d83e9da2c88f7635caf2b746b06d31c28c6eb0240667 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48402)

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/prisons/viewprison.php The vulnerability is caused by the lack of SQL data filter escape ...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45899)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter of /admin.php/news/admin/topic/save validation of external inpu...

Roaming Mantis Expands Android Backdoor to Europe

The Roaming Mantis Android malware campaign has buzzed into Europe, quickly infesting France in particular, where there have been 66,789 downloads of the group’s specific remote access trojan RAT as of January. The campaign pushes the Android RAT known as Wroba aka Moqhao or XLoader onto victim...

Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware

Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while disguising itself as a ransomware infection. "This RAT is infamous for its ransomware-like behavior of appending the file name extension...

Flaw in Safari browser’s API implementation lets user files to be stolen

By Sudais Asif Being one of the major web browsers, Safari browser gets its fair share of scrutiny from cybersecurity professionals. This is a post from HackRead.com Read the original post: Flaw in Safari browsers API implementation lets user files to be stolen...

Agent Tesla Spyware Adds Fresh Tricks to Its Arsenal

Since COVID-19 cast its pall in March, the Agent Tesla remote-access trojan RAT has exploited the pandemic and added a raft of functionality that has helped it dominate the enterprise threat scene. Though Agent Tesla first made a splash six years ago, it hasn’t lost any momentum – in fact, it is...

QSnatch Data-Stealing Malware Infected Over 62,000 QNAP NAS Devices

Cybersecurity agencies in the US and UK yesterday issued a joint advisory about a massive ongoing malware threat infecting Taiwanese company QNAP's network-attached storage NAS appliances. Called QSnatch or Derek, the data-stealing malware is said to have compromised 62,000 devices since reports...

Thanos Ransomware First to Weaponize RIPlace Tactic

Researchers have uncovered a new ransomware-as-a-service RaaS tool, called Thanos, which they say is increasing in popularity in multiple underground forums. Thanos is the first ransomware family observed that advertises the use of the RIPlace tactic. RIPlace is a Windows file system technique...

New PoetRAT Hits Energy Sector With Data-Stealing Tools

A never-before-seen remote access trojan RAT has been discovered in a set of campaigns targeting the energy sector, with a slew of post-exploitation tools to log keystrokes, record footage from webcams and steal browser credentials. Researchers called the malware “PoetRAT” due to various referenc...

49 New Google Chrome Extensions Caught Hijacking Cryptocurrency Wallets

Google has ousted 49 Chrome browser extensions from its Web Store that masqueraded as cryptocurrency wallets but contained malicious code to siphon off sensitive information and empty the digital currencies. The 49 browser add-ons, potentially the work of Russian threat actors, were identified fi...

DoppelPaymer ransomware hits SpaceX, Tesla & Boeing’s parts manufacturer

By Deeba Ahmed According to security researchers, DoppelPaymer Ransomware is a relatively new file-encrypting and data-stealing malware. This is a post from HackRead.com Read the original post: DoppelPaymer ransomware hits SpaceX, Tesla & Boeing's parts manufacturer...

500 Chrome Extensions Caught Stealing Private Data of 1.7 Million Users

Google removed 500 malicious Chrome extensions from its Web Store after they found to inject malicious ads and siphon off user browsing data to servers under the control of attackers. These extensions were part of a malvertising and ad-fraud campaign that's been operating at least since January...