Glassworm botnet disrupted after resilient C2 infrastructure takedown By Ionut Ilascu May 27, 2026 09:28 AM The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana bl… …
… Download Now Related Articles: CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks Microsoft: Domain Controller lookup may fail on Windows Server 2016 Recently leaked Windows zero-days now exploited in attacks CISA gives feds four days to patch Ivanti flaw exploited as zero-day Iv… …
… The commit was referenced via a malicious optional dependency, causing npm to automatically fetch and execute attacker-controlled code during package installation. …
… They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. …
… The malware steals credentials, secrets, crypto wallet data, and account information and exfiltrates it to a command-and-control C2 server at 87e0bbc636999b . lhr . life. The code retains the GitHub publishing functionality, so it uploads stolen credentials to public, auto-generated repositories. …
… Are my prevention and detection controls actually catching what's hitting me right now? Which assets do my controls fail to protect? …
… We are in the process of publishing a new version of this plug-in,” Checkmarx alerted in the update . …
… They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. …
… They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. …
… The Rust-based malware self-propagates by using stolen credentials for publishing on npm; this includes secrets associated with npm's Trusted Publishing workflow. …