comparemela.com

Latest Breaking News On - Lucija valenti - Page 1 : comparemela.com

GitHub, NPM registry abused to host SSH key-stealing malware

Malware distribution on open source package repositories increased 1,300% in the last three years, researchers say.

Lucija valentiReversinglab state of software supply chain securitySoftware supply chain securityLuna grabberPython package index

Typosquatting campaign delivers r77 rootkit via npm

ReversingLabs researchers have identified a new, malicious supply chain attack affecting the npm platform. The “typosquatting” campaign first appeared in August and pushed a malicious package, node-hide-console-windows, which downloaded a Discord bot that facilitated the planting of an open source rootkit, r77. This is the first time ReversingLabs researchers have discovered a malicious open source package delivering rootkit functionality, and suggests that open source projects may increasingly be seen as an avenue by which to distribute malware.

Lucija valentiReversinglabs software supply chain securitySecurity bloggers networkRl software supply chain securitySoftware supply chain securityDiscord remote administration toolSupply chain securityRemote administrationLuna grabberWindows defenderVisual studio codeReversinglabs blog

Someone is targeting Roblox developers with info-stealing malware

Ashley Benge, director of threat intelligence advocacy at ReversingLabs, told SC Media that unlike other popular games, the average developer making Roblox levels is likely to be younger, unattached to a larger corporate or business entity and less sophisticated about threats from open source software.

Ashley bengeLucija valentiLuba grabberLuna grabberImage creditReversing labs

New Campaigns Use Malicious npm Packages to Support Phishing Kits

New Campaigns Use Malicious npm Packages to Support Phishing Kits
infosecurity-magazine.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from infosecurity-magazine.com Daily Mail and Mail on Sunday newspapers.

Once Again, Malware Discovered Hidden in npm

Turkorat-poisoned packages sat in the npm development library for months, researchers say.

Lucija valentiSoftware supply chain threatCan spot malicious

vimarsana © 2020. All Rights Reserved.