Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages in question is "lib-mtop," an unscoped package with the same name as a private Alibaba package
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
TN

The Hacker News

1d ago
0 0

Discussion

Be the first to comment

Add your perspective to get the discussion started.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Iran Cyberattacks Against Minnesota Water Systems

Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this…
SS

Schneier on Security

2h ago
0
darkreading.com
Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks.
DR

Dark Reading

3h ago
0
bleepingcomputer.com
Massive ChainDrop npm supply-chain attack infects hundreds of p…

Self-propagating malware named 'ChainDrop' has compromised more than 1, 300 packages with a combined 2 billion monthly downloads on the Node Package Manager (n…
Nirano

Nirano

7h ago
0
thehackernews.com
When Vibe Hacking Turns AI into the Junior Hacker Every Adversa…

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Securi…
TN

The Hacker News

10h ago
0
thehackernews.com
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as…

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPan…
TN

The Hacker News

11h ago
0
schneier.com
Some Claude Chats Are Searchable on Google

And it’s personal information (alternate link): The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on mee…
SS

Schneier on Security

12h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
When Vibe Hacking Turns AI into the Junior Hacker Every Adversa…

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Securi…
TN

The Hacker News

10h ago
0
thehackernews.com
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as…

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPan…
TN

The Hacker News

11h ago
0
thehackernews.com
DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader …

A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache…
alex but tired

alex but tired

13h ago
0
thehackernews.com
CISA Adds Exploited N-able N-central Flaw to KEV After Customer…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploit…
TN

The Hacker News

15h ago
0
thehackernews.com
Google Password Manager Attacks Could Let Malware Hijack Passke…

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
TN

The Hacker News

1d ago
0
thehackernews.com
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin The…

An attacker drained 1, 196 Bitcoin addresses in 41 minutes on July 30, taking 1, 082. 65 BTC worth about $70. 2 million at the time. Galaxy Research mapped the…
Noor Bakker

Noor Bakker

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest