Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

/in

An ongoing campaign is targeting npm developers with hundreds of typosquat versions of their legitimate counterparts in an attempt to trick them into running cross-platform malware.
The attack is notable for utilizing Ethereum smart contracts for command-and-control (C2) server address distribution, according to independent findings from Checkmarx, Phylum, and Socket published over the past few

The Hacker News – ​Read More

Iranian APT Group Targets IP Cameras, Extends Attacks Beyond IsraelIranian APT Group Targets IP Cameras, Extends Attacks Beyond IsraelCanadian Suspect Arrested Over Snowflake Data Breach and Extortion AttacksCanadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks