Malicious code in tkcallendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 091da316c04a67c06230fcacc589735925c578c581ac5e4b53f9559824035fca Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prmopt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ee7ba5aaf4be0952abc2bada752ea586dd24ffc7cd0fe61f5d852f7273f08b2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1261c75a8d1e3798424e001e837db3aa3146f10d5c703718cc3d3237ea5b4024 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prgressbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a4b129eb541c6ba1a0ccbdc53334cf0fe053213a195e9d367e5b7a53e858fcbe Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discord-pyy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9869f3d7c02f8a1bd504488383320d5f53673ba85736a29539ae724087554b8e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toolbel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6dff3acc478e29fb226d2b2a892894caca51e8d4610740924f57f0ce29e1b561 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in wbsocket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dcded1c53684bce57c002b2ecaa2fc51c27dbe293f10ab57646a5f9685b7897 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in aihottp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 98a22867b0350be05e9b2f1550e61cce611a5e74b5c65c5be1542cdcbd0c2967 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f2b04dc5f801036e2b2232284cac00ae9947d9430365a95aec226804aa88d11a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beaautifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6b67a3077288d17085e0b781a1b2ed20206e933e94ed94a93ab84f1afe27f9f0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crryptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab28b3e1b30f47acf85d6725cf066084210c527777d43730693bbdcc0ba3ad2c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

The Menace of TrickGate Packer-as-a-Service Spreading Malware Globally

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary TrickGate has bundled several of the most well-known top-distribution malware families, including Trickbot, Maze, Emotet, REvil, CoinMiner, Cobalt Strike, Formbook, Remcos, AgentTesla, and many others...

NeedleDropper malware leverages a memory corruption flaw in Microsoft to disseminate

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new dropper strain dubbed NeedleDropper is used to distribute multiple malware families. The dropper attempts to obfuscate by dumping numerous useless, invalid files and storing critical data within...

Russian Turla Hackers Hijack Decade-Old Malware Infrastructure to Deploy New Backdoors

The Russian cyberespionage group known as Turla has been observed piggybacking on attack infrastructure used by a decade-old malware to deliver its own reconnaissance and backdoor tools to targets in Ukraine. Google-owned Mandiant, which is tracking the operation under the uncategorized cluster...

The Dangers of macOS Ransomware A Closer Look at KeRanger, FileCoder, MacRansom, and EvilQuest

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MacOS ransomware typically spreads through user-assisted methods such as downloading and running fake or trojanized applications. It can also arrive as a second-stage payload dropped or downloaded by oth...

Brave Software: S3 Bucket Takeover : brave-apt

An unclaimed S3 bucket was found on the domain brave.com, which was being used in the installation of brave-browser in Linux distros. An attacker could have taken over the S3 bucket and used it to spread malware or create a fake login page to spoof users. The vulnerability was reported to the...

Raspberry Robin Operators Selling Cybercriminals Access to Thousands of Endpoints

The Raspberry Robin worm is becoming an access-as-a-service malware for deploying other payloads, including IcedID, Bumblebee, TrueBot aka Silence, and Clop ransomware. It is "part of a complex and interconnected malware ecosystem, with links to other malware families and alternate infection...

A week in security (September 19 – 25)

Last week on Malwarebytes Labs: Hookup site targeted by typo-squatters American Airlines suffers data breach after phishing incident Grand Theft Auto 6 suffers grand theft EDR vs MDR vs XDR - Whats the Difference? Scammers send fake 'Energy Bills Support Scheme' texts Tax refund phish logs...

Hackers are using Microsoft Teams chat to spread malware

By Waqas So far, researchers have identified thousands of these attacks involving abuse of the Microsoft Teams chat feature. As… This is a post from HackRead.com Read the original post: Hackers are using Microsoft Teams chat to spread malware...

GHSA-6JM6-CMCP-FQJQ Nomad Spread Job Stanza May Trigger Panic in Servers

Nomad and Nomad Enterprise allows operators with job-submit capabilities to use the spread stanza in a way such that it can cause panic in Nomad servers. This vulnerability, CVE-2022-24684, was fixed in Nomad 1.0.18, 1.1.12, and 1.2.6...