A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index (PyPI) repository that are designed to drop malware on compromised developer systems.
The packages – named colorslib (versions 4.6.11 and 4.6.12), httpslib (versions 4.6.9 and 4.6.11), and libhttps (version 4.6.12) – by the author between January 7, 2023, and January 12, 2023. They have since been
Related Post
- November 23, 2024
Google Exposes GLASSBRIDGE: A Pro-China Influence Network of
Government agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor
- November 23, 2024
North Korean Hackers Steal $10M with AI-Driven Scams
The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of
- November 22, 2024
Friday Squid Blogging: Transcriptome Analysis of the Indian
Lots of details that are beyond me. Blog moderation policy.
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asyncshell. The attack