CVE-2019-19771

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets...

CVE-2019-19771

CVE-2019-19771 concerns the lodahs package (Node.js) version 0.0.1, a malware trojan masquerading as lodash that installs via mistyped npm package names and exfiltrates cryptocurrency wallets. Multiple sources (Red Hat, NVD, GHSA, OSV, CNVD, CVE lists) describe it as malware affecting Node.js env...

Threat Analysis Unit (TAU) Threat Intelligence Notification: Skidmap

Hijacking machine resources and using them to mine for cryptocurrency continues to be an attractive and lucrative target for threat actors. As we’ve continued to see this type of attack used, we’ve also seen more platforms being targeted. Seeing cryptocurrency mining malware targeting Linux and...

ShapeShift KeepKey Buffer Overflow Vulnerability

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. ShapeShift KeepKey suffers from a punch zone overflow vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

Why DNS Visibility Matters in Education

My colleague in Spain recently wrote an informative article about DNS Protection and why it's a must-have security solution for any company. Building out on this topic, I would like to look specifically at the Education market and what the consequences can be if DNS Visibility is not taken...

UPbit cryptocurrency exchange hacked; Ether worth $50 million stolen

By Waqas South Korean cryptocurrency exchange UPbit has been hacked where hackers have stolen 342,000 Ether ETH - $51 million. This is a post from HackRead.com Read the original post: UPbit cryptocurrency exchange hacked; Ether worth $50 million stolen...

Malicious Package

singale is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

signqle is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

scryptys is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

ripedm160 is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

riped160 is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

rceat is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

path-to-regxep is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

hw-trnasport-u2f is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

hdeky is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious Package

hdkye is a malicious package that finds and exfiltrates cryptocurrency wallets...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...