Backdoor infecting VPNs used “magic packets” for stealth and security
When threat actors use backdoor malware to gain access to a network, they want to make sure all their hard work can’t be…
Yearlong supply-chain attack targeting security pros steals 390K credentials
But wait, there’s more On Friday, Datadog revealed that MUT-1244 employed additional means for installing its second-stage malware. One was through a collection…
Hundreds of code libraries posted to NPM try to install malware on dev machines
The IP address returned by a package Phylum analyzed was: hxxp://193.233.201[.]21:3001. While the method was likely intended to conceal the source of second-stage…
Thousands of Linux systems infected by stealthy malware since 2021
This Reddit comment posted to the CentOS subreddit is typical. An admin noticed that two servers were infected with a cryptocurrency hijacker with…