Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

DotRunpeX: The Malware That Infects Systems with Multiple Families

By Deeba Ahmed Researchers suspect that the malware may be operated by Russian-speaking groups, given the references to the language in its code. This is a post from HackRead.com Read the original post: DotRunpeX: The Malware That Infects Systems with Multiple Families...

GHSA-GCFC-MGG3-8J2C Malicious Package in sdfjghlkfjdshlkjdhsfg

All versions of sdfjghlkfjdshlkjdhsfg contain malicious code. The package is essentially a worm that fetches all packages owned by the user, adds a script to self-replicate as a preinstall script and publishes a new version. Recommendation Remove the package from your environment and ensure all...

CVE-2017-16127

The module pandora-doomsday infects other modules. It's since been unpublished from the registry...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Android Trojan Switcher Infects Routers via DNS Hijacking

A new Android Trojan uses a victims’ devices to infect WiFi routers and funnel any users of the network to malicious sites. The malware doesn’t target users directly – instead its goal is to facilitate further attacks by turning victims into accomplices. Researchers at Kaspersky Lab, who discover...

BIOS based Virus discovered by Chinese Security Firm

BIOS based Virus discovered by Chinese Security Firm A Chinese AV company 360 discovered a new Trojan, the "BMW Virus" also called Mebromi, that can actually infect a computers BIOS: "BMW 360 Security Center virus is the latest catch of a high-risk virus, the virus that infected a chain BIOS...

Opachki Trojan Hijacking Web Links

The malware authors who have been writing password-stealing Trojans, banking Trojans and rootkits have branched out into a new form of persistent malware designed to hijack victims’ Web browsing sessions. A new Trojan called Opachki is making the rounds and it is doing far more than just logging...