Sonatype Blog چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۲:۳۸

PolinRider Loader Reappears in Hijacked npm Packages

TL;DR Sonatype Research Labs identified concealed runtime loaders in 12 npm releases across 10 hijacked packages. All 12 releases contain loaders designed to decode payload-server IP addresses from Ethereum transactions sent by the same hard-coded wallet previously reported in PolinRider activity, then retrieve, XOR-decode, and execute JavaScript. Six conceal the loader in eval(atob(...)); six use a character-permuta…

Malware & Threats Programming & Languages Networking & Internet Open Source

Read the full article at Sonatype Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Record (Recorded Future) جمعه ۱۵ آبان ۱۴۰۵ · ۰۱:۳۸

Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers

The library system, which has 66 branches serving the borough’s 2.3 million residents, published multiple alerts on Wednesday confirming that the disruption was caused by a ransomware attack.

Malware & Threats Ransomware

Source

CSO Online جمعه ۱۵ آبان ۱۴۰۵ · ۰۱:۲۷

Binance heist is stark example of AI governance gaps and basic security failures

A chain of avoidable technical and human security failures enabled the largest crypto heist on record, the theft of approximately $6.34 billion from Binance. The improper monitoring and access scoping of an internal AI tool played a major role in helping the hackers, and should serve as a warning for enterprise CISOs to take AI governance seriously. Binance’s initial findings report, published Nov. 3, describes a mon…

Malware & Threats Vulnerabilities & Zero-Day Data Breach

Source

Dark Reading جمعه ۱۵ آبان ۱۴۰۵ · ۰۱:۰۵

US Government Email Systems Open to Abuse Thanks to Typos

Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.

Networking & Internet

Source

Flashpoint جمعه ۱۵ آبان ۱۴۰۵ · ۰۰:۳۳

Inside BTMob: How a Source Code Leak Expanded Access to a Mobile RAT

In this blog Flashpoint analysts examine BTMob's capabilities, the actors distributing the malware, and how leaked source code has reshaped its presence across illicit cybercriminal communities. The post Inside BTMob: How a Source Code Leak Expanded Access to a Mobile RAT appeared first on Flashpoint.

Malware & Threats Data Breach Threat Intelligence

Source