5 matches found
MAL-2022-1694 Malicious code in browser-warning-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a73ad176b05f73ad8e958ea3364cf83dc2cd9a49fb587ab00d44d158e19095b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in browser-warning-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a73ad176b05f73ad8e958ea3364cf83dc2cd9a49fb587ab00d44d158e19095b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
IDN Homograph Attack Spreading Betabot Backdoor
An IDN homograph attack leveraging Adobe’s brand has been discovered, with the malicious site spreading the Betabot backdoor and ultimately infecting compromised machines with cryptocurrency-mining and data-stealing malware. Attacks using internationalized domain name homographs rely on users...
Radancy: SSL certificate invalid date
This SSL certificate is either expired or not yet valid. Some browsers will continue connecting to the site after presenting the user with the warning, while others will prompt the user with a dialog box requesting their approval to proceed. These warnings are extremely confusing for the typical...
Komodia Certificate Manipulation Enabled Man-In-The-Middle Attacks
The shoddy state of SSL certificate validation on the Internet again floated to the surface, this time by the Superfish mess, which continues to get worse. The Electronic Frontier Foundation on Wednesday released a report based on data scoured from the Decentralized SSL Observatory which it...