MAL-2024-7869 Malicious code in distube-fast (npm)

This package is a starjack of distube with the addition of a malicious postinstall hook which downloads a PE with characteristics of a downloader/infostealer...

Malicious code in distube-fast (npm)

This package is a starjack of distube with the addition of a malicious postinstall hook which downloads a PE with characteristics of a downloader/infostealer...

How Infostealers Pillaged the World’s Passwords

Infostealer malware is swiping millions of passwords, cookies, and search histories. It’s a gold mine for hackers—and a disaster for anyone who becomes a target...

MAL-2024-12345 Malicious code in soal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acbef83f8fce2a2944f16812b0a2f89f92b4b0e0902439a4224b7ddd2b516f9b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

Malicious code in soali (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c73ab625e57bbab36d706b35ebf4f344a01e77b5f6f53b71765e029a845ee12 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

Malicious code in ebe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f86097ff84bdd8007ecb73c8e4a3d412500e503469684998f78fd39b14e51d5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12346 Malicious code in soali (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c73ab625e57bbab36d706b35ebf4f344a01e77b5f6f53b71765e029a845ee12 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

Malicious code in ebell (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e8e763e9a652876b90896b11102319e43569b39d2be23d4170446ded6a619b1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12263 Malicious code in ebell (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e8e763e9a652876b90896b11102319e43569b39d2be23d4170446ded6a619b1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

Imagine you could gain access to any Fortune 100 company for $10 or less, or even for free. Terrifying thought, isn't it? Or exciting, depending on which side of the cybersecurity barricade you are on. Well, that's basically the state of things today. Welcome to the infostealer garden of...

Malicious code in fasdghjkhjafsd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2384ead182322f38776720b4406ef7589305cdd61f49fa6ae98ae31288b447b2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-prices-txt-exfiltration Reasons based on the campaign...

ViperSoftX Malware Disguises as eBooks on Torrents to Spread Stealthy Attacks

The sophisticated malware known as ViperSoftX has been observed being distributed as eBooks over torrents. "A notable aspect of the current variant of ViperSoftX is that it uses the Common Language Runtime CLR to dynamically load and run PowerShell commands, thereby creating a PowerShell...

MAL-2024-12319 Malicious code in openai-py3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32887a019aca436d09e5e770e5a57d6c1535110f95595f1589e0de9899f9a5d3 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...

Malicious code in openai-py3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32887a019aca436d09e5e770e5a57d6c1535110f95595f1589e0de9899f9a5d3 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...

MAL-2024-12289 Malicious code in hugchats (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 172ccaf532e98b4ea6a98cdd9cb1cfb7b7f1b0efd593217f28d5a6b825edc1c1 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...

Malicious code in deepseek-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96ca6d620b3741a6c0d3df99b09223e35e63a15cf8dcc5935d28785ad66361b0 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...

PT-2024-4626

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The vulnerability is related to the MSHTML platform in Microsoft Windows and involves a spoofing issue that allows attackers to affect the system. It has been exploited by threat...

Malicious code in transformars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21a990a504294c9083adc25cefdd9ed927574220d78968f43fe1469b344d1229 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-transformars-research Reasons based on the campaign: ...

Researchers Track Identities and Locations of CSAM Users via Malware Logs

Alarming new research exposes thousands of CSAM child sexual abuse material consumers through infostealer malware logs. Recorded Future…...

Malicious code in whoisbuild (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b8f206b101a7dd5ada26eac1215351711e553298254e775f02bf41b15b6b55b7 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...