New Mystic Stealer Malware Targets 40 Web Browsers and 70 Browser Extensions

A new information-stealing malware called Mystic Stealer has been found to steal data from about 40 different web browsers and over 70 web browser extensions. First advertised on April 25, 2023, for $150 per month, the malware also targets cryptocurrency wallets, Steam, and Telegram, and employs...

Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

Meta said it took steps to take down more than 1,000 malicious URLs from being shared across its services that were found to leverage OpenAI's ChatGPT as a lure to propagate about 10 malware families since March 2023. The development comes against the backdrop of fake ChatGPT web browser extensio...

Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

Meta said it took steps to take down more than 1,000 malicious URLs from being shared across its services that were found to leverage OpenAI's ChatGPT as a lure to propagate about 10 malware families since March 2023. The development comes against the backdrop of fake ChatGPT web browser extensio...

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection

A significant number of victims in the consumer and enterprise sectors located across Australia, Japan, the U.S., and India have been affected by an evasive information-stealing malware called ViperSoftX. ViperSoftX was first documented by Fortinet in 2020, with cybersecurity company Avast...

German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users' Gmail inboxes. The joint advisory comes from Germany's domestic intelligence apparatus, the Federal Office for the Protection of...

German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users' Gmail inboxes. The joint advisory comes from Germany's domestic intelligence apparatus, the Federal Office for the Protection of...

SUSE CVE-2017-1000387

Jenkins Build-Publisher plugin version 1.21 and earlier stores credentials to other Jenkins instances in the file hudson.plugins.buildpublisher.BuildPublisher.xml in the Jenkins master home directory. These credentials were stored unencrypted, allowing anyone with local file system access to acce...

Malicious code in tkalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc429bccca75f57bfabb5cbe57f6c52388f3a446e9aa277514d0d531dd523fa1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beauifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 27adc3ec6282fb2c6e0701756ba1abcbfa669db81b01d6e106c5ec06699202eb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitpythn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3b433c6b7a9af7de2df48e610974b1a2219c6353f656dac1f27078e7ad4ab7b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tooolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7bfa11dce7ead28933795494d063c0259945245850cc40db9a12da851be8eb64 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1974 Malicious code in progreessbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dbfc133665ef13c274448582554a848fd6e91eb2f239961bc4a07519b4facd9b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressbra2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 541adad4258c4912065530a6896ce7c7a9807c035c541175cb2017a452426dec Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pysokcs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96a14961b77fd36e741b7745108eb953cacff673fd29de43c1586b8f6e52d947 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pysockss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 90774711286b158de91fc48e37c93433a523b67ee25925fdbcbf346933bb578f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psuttil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b8c705805e5e155244f693947f645d38d444b39d6d28957aaca9f3848dadd81 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1800 Malicious code in discordd-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ec9b98af7a0f6a1f9a6e018eee4a99ce3be0fd25d50a4309a6b13c807a7aefb7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in diiscord-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 236e362e04629c82c14aa65876a4f53b9c72fd61598027880b992cf11cc97fe8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in reuqests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7795ca49ef0c9bf69be44a3723aa94a72d5c20c231fcb485f66f5cdbbb55e037 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyython-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 36c558e5f8b399d7ebe162148b5a3f0b96ec66804726365391d160e3cccd8ab0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...