Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

/in

Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil’s largest cooperative financial systems, to siphon client IDs and PFX certificates.

According to Socket, versions 2.0.0 through 2.0.4 of “Sicoob.Sdk” contain functionality to exfiltrate sensitive information, including PFX certificates that are used to

The Hacker News – ​Read More

The Deliverability Problem: How New Platforms Are Solving Inbox PlacementI tried different Android Auto weather apps – these 3 are best for storm...