DEEP#DOOR embeds a Python RAT in a dropper script, using bore[.]pub C2 to steal credentials and evade Windows defenses, ...
A stealthy Python-based backdoor framework capable of long-term surveillance and credential theft has been identified ...
The stealthy Python-based backdoor framework deploys a persistent Windows implant likely designed for espionage.
A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...
The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...
Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught ...
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...
An analysis of the destructive malware reveals extensive living-off-the-land (LotL) techniques and detailed strategies for ...
The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...