Lazarus Group deceives developers with 6 new malicious npm packages
Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday.
Advertisement
malware
New zero-day exploit targets Ivanti VPN product
After Ivanti detected the activity, Mandiant says it found malware in impacted devices associated with a Chinese-linked threat group.
PHP backdoor looks to be work of Chinese-linked APT group
Known as Glutton, researchers at QiAnXin’s XLab believe Winnti is responsible for the malware.
Treasury sanctions Chinese cyber company, employee for 2020 global firewall attack
The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy malware on 81,000 firewalls.
Malware linked to Salt Typhoon used to hack telcos around the world
A report from Trend Micro details the highly sophisticated ways Salt Typhoon carries out its operations.
Advertisement
US charges Russian national for developing RedLine infostealer
Maxim Rudometov, who is believed to reside in southern Russia, is not likely to be extradited.
Operation Magnus targets Redline, Meta infostealers
Authorities say they've gained "full access" to the hackers' servers.
Cyber firm KnowBe4 hired a fake IT worker from North Korea
The security awareness training company said in a blog post that the software engineer used stolen U.S. credentials and an AI-enhanced photo.
Global police operation strikes against malware infrastructure
‘Operation Endgame’ targeted well-known malware variants used to facilitate ransomware and other serious cybercrime.
Decade-old malware haunts Ukrainian police
A virus dating to 2015 is still hitting targets in Ukraine, showing its enduring power.
Advertisement