Australia warns of ClickFix attacks pushing Vidar Stealer malware
… It targets browser passwords, cookies, cryptocurrency wallets, autofill information, and system details. …
Search
Filtered by topic: Cybersecurity Clear ✕
Leaked Shai-Hulud malware fuels new npm infostealer campaign
… Researchers at OXsecurity, a company that secures applications from code to runtime, discovered the malicious uploads over the weekend and noticed that the threat actor used misspelled names typosquatting targeting Axios users, and some generic ones: chalk-tempalte – Shai-Hulud clone information st… …
DAEMON Tools devs confirm breach, release malware-free version
… Download Now Related Articles: DAEMON Tools trojanized in supply-chain attack to deploy backdoor Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages TeamPCP hackers advertise Mistral AI code repos for sale OpenAI conf… …
Popular node-ipc npm package compromised to steal credentials
… The recent supply-chain attack was detected by multiple application security companies, including Socket , Ox Security , and Upwind , who confirmed the following three versions as malicious: node-ipc@9.1.6 node-ipc@9.2.3 node-ipc@12.0.1 The malicious code hides inside the CommonJS entrypoint node-i… …
OpenAI confirms security breach in TanStack supply chain attack
… Microsoft Threat Intelligence also reported that it launched a Linux information-stealing tool that targeted systems running Russian-language software. …
New Shai-Hulud malware wave compromises 600 npm packages
… According to application security company Socket, the hackers published 639 malicious versions across 323 unique packages in about one hour. …
New TCLBanker malware self-spreads over WhatsApp and Outlook
… The new banking trojan was discovered by Elastic Security Labs , whose researchers believe it’s a major evolution of the older Maverick/Sorvepotel malware family. …