Malicious code in stringcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6920f5b0fadfd0e04cd4caad7ec704ae952be15ef6141f4956938c88ddfdf1f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in nvidiaproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8fd24d1ef40f149ec6c69e79e3538092b2bd3077302007403a90dd9f622841f5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in intlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 41f6b20106ec13c3f7789e6bfda7880f3908e57060095d497e4797166ed6d2cf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in edcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 59c94f00ee4bc2aac3ee4932a90f8464b1b90cc60760b211a522582592199089 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Exploiting ChatGPT’s Popularity for Malware Distribution

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The attack on ChatGPT involved the exploitation of its widespread usage to distribute malware and carry out various cyber-attacks, including phishing and typosquatting...

Malicious code in urlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97b5a119a09ef624c0d520c0f3eb50281d6c24f7fc973fbafed667175efabc67 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in beautifulsooup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20295d15744840724442dda39ce2b027e50b10c1d88c6096693b327ae31b9a9e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ppysocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 38540275c371181dda67a43b570387a974b8079ae2fca3124c34352b6e915e48 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discord-webhoko (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7e9546bb5cbba43e250bf69455a101114549ff29db80f8e0553a25263f27f90c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requestts-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a4daf428d7a1ca554f27713fe270eabb55b71597caedb7fe37bd3236965b5279 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rullib3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5e28b5db029600dceba0182a6edd16fcf4a3e8ac32614f47cdf8459551f66ac9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in lsxwriter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c8790d476f59dcb1cf93d161248b7c597632711dea46228be7c5cc47372c523 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in clicck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2522e09c8b7abef55deb742ac069a77655070b7784567f2ffd6e878eb059f045 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikit-learrn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6261f6392d04845d0869038b1c01650953161de75cb736868d50a6f4abf82779 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocketss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dc5e3cadff0574c5332d7f4850a593214308412ce66ea38e2fe3874e916b1d79 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockkets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5aa87e15f8a53b39bd4406aeb7eaabe601b49fa3dbfbdc1b5b017d5a63421c85 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in solaan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0baf1ce8179f175f40d35fcf254997d96ef5859c5f7d8d77b983f4dab7dcaf9f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccryptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8fba011f0180ec1c042cfb37437774531268f0cc8507b60abb5ef8bd1b2a6e1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

No More Macros? Better Watch Your Search Results!

No More Macros? Better Watch Your Search Results! By Pham Duy Phuc · February 08, 2023 This blog was also written by Max Kersten Threat actors often rely on the same techniques until their hand is forced, usually due to defensive changes or chance-based opportunities, to leverage a new technique...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...