Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates the bundled binary, marks it executable, and launches it as a detached background process," TrendAI, Trend Micro's
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
TN

The Hacker News

1d ago
1 0

Discussion

Break the silence

Take the opportunity to kick things off.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

RY

ryan maybe

ryan maybeUpvoted 22h ago0 comments · 51 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a pr…
Marcus Allen

Marcus Allen

17h ago
0
thehackernews.com
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy …

The U. S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of vi…
TN

The Hacker News

18h ago
0
bleepingcomputer.com
Named Pipes Under Attack: Securing Windows Interprocess Communi…

Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker expla…
JA

jordan af

19h ago
0
schneier.com
Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and gl…
SS

Schneier on Security

1d ago
0
darkreading.com
OWASP Flags Top AI Skill Risks in New Security Blueprint

The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add…
DR

Dark Reading

1d ago
0
bleepingcomputer.com
CISA orders feds to patch actively exploited TrueConf Server fl…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U. S. federal agencies to prioritize patching two actively exploited vulnerabilities…
JA

jordan af

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy …

The U. S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of vi…
TN

The Hacker News

18h ago
0
thehackernews.com
Wazuh and AI For Enhanced SOC Workflows

Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations i…
TN

The Hacker News

1d ago
0
thehackernews.com
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Sc…

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal securi…
TN

The Hacker News

1d ago
0
thehackernews.com
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GL…

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate app…
TN

The Hacker News

2d ago
0
thehackernews.com
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload P…

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote…
TN

The Hacker News

3d ago
0
thehackernews.com
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Wor…

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-l…
TA

taylor??

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest