npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

/in

Cybersecurity researchers have identified several malicious packages across npm, Python, and Ruby ecosystems that leverage Discord as a command-and-control (C2) channel to transmit stolen data to actor-controlled webhooks.
Webhooks on Discord are a way to post messages to channels in the platform without requiring a bot user or authentication, making them an attractive mechanism for attackers to

The Hacker News – ​Read More

Can’t upgrade your Windows 10 PC? Support has ended, so you need to act...New Malware Tactics: Cases & Detection Tips for SOCs and MSSPsNew Malware Tactics: Cases & Detection Tips for SOCs and MSSPs