A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77, marking the first time a rogue package has delivered rootkit functionality.
The package in question is node-hide-console-windows, which mimics the legitimate npm package node-hide-console-window in what’s an instance of a typosquatting campaign. It was downloaded 704
Related Post
- November 23, 2024
Google Exposes GLASSBRIDGE: A Pro-China Influence Network of
Government agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor
- November 23, 2024
North Korean Hackers Steal $10M with AI-Driven Scams
The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of
- November 22, 2024
Friday Squid Blogging: Transcriptome Analysis of the Indian
Lots of details that are beyond me. Blog moderation policy.
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asyncshell. The attack