Malicious code in libultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4ef175aceaad468d1190f6cba7ef4a1012fc5e86fb922d88825003dc5dfe801 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in repip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9851c46486d732482436bbb91fc92d6e7c663bb3a6f24d4ce41868ff3fdb9cc9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in ramgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef51b5f9c32b3bde35bdfefac6844b327a64652151064e5ff999951ffcaf1d1b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in toolpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c284b703e26b6724207e17b85dd177f161273d832febb5d931be3a95f4efe894 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in postload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9eecf916ef20a31cbf57f2d408d6e3c8f80fa9dd6292aa5ae614e017bed13858 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in getpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7acd8cf6fd74bcb907ac5b63892113ba00cb46e39d913724798340f5f65fbafd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in grandpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4a21df4082a8a52f353e247b5def05e841490f639c043b98e2bb85fbf216343d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pipmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e1146f14ebc8f2bbc0b46fb5170b262081318e98986d0ffcdfc34a2235bb5139 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httpmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07c22f9975db4ffa2d5ff5b3c177269e18f3e2d9f3a7baefe39dcaa4c3512322 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in craftre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8f89366f34d8faea9148e574d7297f44e5cd7edaabd13e94395c86fb54509a2b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in infogame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aab53f9496c25c28131ff274905cd7433e72bbaf9e3aa82dfabcf210ba837f0e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in infopost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 50286e0443c5cda90c4b2e70923670db18925f2f02ced361eb21d5961a7129f2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in supertool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aabb488be4cf8a3a181f436da61ed2e13d62c860715e99b7a30b439bd09f483d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httpad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef36c406f0255d732d651818988cda2af3636a5fbf83ccdc02a04fb28ae266e9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in guicpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5763563ba13a086b29e12df7d4fd3c24c5c1fe3c2b925eccb4e69ce0a395f749 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

DNA testing company fined after customer data theft

DNA Diagnostics Center DDC, an Ohio-based private DNA testing company, last week reached a settlement deal with the Ohio and Pennsylvania state attorneys general in relation to a 2021 breach that saw the theft of 45,000 residents' personal details. Overall the attack compromised over 2.1 million...

K35414143: AMNESIA:33 vulnerability

Security Advisory Description AMNESIA:33 is a set of 33 vulnerabilities that impact four open source TCP/IP stacks uIP, FNET, picoTCP and Nut/Net, which collectively serve as the foundational components of millions of connected devices worldwide. These vulnerabilities primarily cause memory...

Researchers Discover Numerous Samples of Information Stealer 'Stealc' in the Wild

A new information stealer called Stealc that's being advertised on the dark web could emerge as a worthy competitor to other malware of its ilk. "The threat actor presents Stealc as a fully featured and ready-to-use stealer, whose development relied on Vidar, Raccoon, Mars, and RedLine stealers,"...

HardBit ransomware tailors ransom to fit your cyber insurance payout

Ransomware authors are wading into the cybersecurity insurance debate in a somewhat peculiar way. Specifically: urging victims to disclose details of their insurance contract, in order to tailor a ransom which will be beneficial to the company under attack. HardBit 2.0: dismantling a device piece...

Multilingual skimmer fingerprints 'secret shoppers' via Cloudflare endpoint API

One important aspect of data theft in criminal markets revolves around the authenticity of the data that is being resold. There are different services that exist to vet such things as credit card numbers so that buyers can purchase with confidence. Criminals are also very aware that anyone and in...