North Korean Lazarus Group has deployed a sophisticated web-based admin platform for managing command-and-control operations in Operation Phantom Circuit, a supply chain attack targeting cryptocurrency sector and developers. Using React frontend and Node.js backend, the system manages 1,63...
A sophisticated supply chain attack involving 18 malicious Visual Studio Code extensions and npm packages has been discovered targeting developers and cryptocurrency projects. The malware, masquerading as legitimate development tools, uses obfuscated payloads and suspicious domains to comp...
German cybersecurity agency disrupts BADBOX malware operation affecting 30,000 Android devices. The malware, discovered in October 2023, was pre-installed on various devices and combined Triada malware with PEACHPIT ad fraud botnet, enabling data theft, malware installation, and unauthoriz...
Chinese state-sponsored hackers targeted European IT service providers in Operation Digital Eye, exploiting Visual Studio Code and Azure infrastructure. The campaign, detected between June-July 2024, used SQL injection attacks, custom malware, and legitimate development tools to breach net...
A sophisticated supply chain attack targeting the npm registry through the malicious @0xengine/xmlrpc package has compromised systems for over a year. The malware steals sensitive data, mines cryptocurrency, and spreads through direct installation and a WordPress tool dependency, affecting...
