Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

/in

Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act as checker tools to validate stolen email addresses against TikTok and Instagram APIs.
All three packages are no longer available on PyPI. The names of the Python packages are below –

checker-SaGaF (2,605 downloads)
steinlurks (1,049 downloads)
sinnercore (3,300 downloads)

The Hacker News – ​Read More

‘Operation RoundPress’ Targets Ukraine in XSS Webmail Attacks‘Operation RoundPress’ Targets Ukraine in XSS Webmail AttacksGo-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration AbuseGo-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration...