Malicious code in urlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97b5a119a09ef624c0d520c0f3eb50281d6c24f7fc973fbafed667175efabc67 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in beautifulsooup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20295d15744840724442dda39ce2b027e50b10c1d88c6096693b327ae31b9a9e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ppysocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 38540275c371181dda67a43b570387a974b8079ae2fca3124c34352b6e915e48 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discord-webhoko (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7e9546bb5cbba43e250bf69455a101114549ff29db80f8e0553a25263f27f90c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requestts-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a4daf428d7a1ca554f27713fe270eabb55b71597caedb7fe37bd3236965b5279 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rullib3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5e28b5db029600dceba0182a6edd16fcf4a3e8ac32614f47cdf8459551f66ac9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in lsxwriter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c8790d476f59dcb1cf93d161248b7c597632711dea46228be7c5cc47372c523 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in clicck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2522e09c8b7abef55deb742ac069a77655070b7784567f2ffd6e878eb059f045 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikit-learrn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6261f6392d04845d0869038b1c01650953161de75cb736868d50a6f4abf82779 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocketss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dc5e3cadff0574c5332d7f4850a593214308412ce66ea38e2fe3874e916b1d79 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockkets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5aa87e15f8a53b39bd4406aeb7eaabe601b49fa3dbfbdc1b5b017d5a63421c85 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in solaan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0baf1ce8179f175f40d35fcf254997d96ef5859c5f7d8d77b983f4dab7dcaf9f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccryptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8fba011f0180ec1c042cfb37437774531268f0cc8507b60abb5ef8bd1b2a6e1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

No More Macros? Better Watch Your Search Results!

No More Macros? Better Watch Your Search Results! By Pham Duy Phuc · February 08, 2023 This blog was also written by Max Kersten Threat actors often rely on the same techniques until their hand is forced, usually due to defensive changes or chance-based opportunities, to leverage a new technique...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

Crypto-inspired Magecart skimmer surfaces via digital crime haven

This blog post was authored by Jerome Segura Online criminals rarely reinvent the wheel, especially when they don't have to. From ransomware to password stealers, there are a number of toolkits available for purchase on various underground markets that allow just about anyone to get a jumpstart...

Malware Distribution via Google PPC by IcedID Botnet Distributors

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The IcedID botnet has been using Google pay-per-click ads to distribute itself through malvertising attacks since December 2022. Malvertising involves the use of malicious ads that are displayed in searc...

Microsoft research uncovers new Zerobot capabilities

Botnet malware operations are a constantly evolving threat to devices and networks. Threat actors target Internet of Things IoT devices for recruitment into malicious operations as IoT devices’ configurations often leave them exposed, and the number of internet-connected devices continue to grow...

Node.js: Take over subdomain undici.nodejs.org.cdn.cloudflare.net

Hello, this is a pretty serious security issue in some contexts, so please act as soon as possible Summary: I just went to undici.nodejs.org, and I've also checked the IP of the main domain it goes to cdn.cloudflare.net which means if it's not added it can be added to any github account your...