News

Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware
A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown ...
The Hacker News3d
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments
Malware-laced PyPI and npm packages steal developer credentials, CI/CD data, and crypto wallets. Attacks target macOS, AI ...
The Hacker News17h
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
Malware campaign abuses Cloudflare Tunnel and phishing lures to deliver in-memory RATs across multiple regions.
SecurityWeek1h
Cloudflare Tunnels Abused in New Malware Campaign
A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain.
CoinDesk1h
North Korean Hackers Are Targeting Top Crypto Firms With Malware Hidden in Job Applications
A DPRK-linked group is using fake job sites and Python malware to infiltrate Windows systems of blockchain professionals — ...
CSO Online2d
Malicious PyPI package targets Chimera users to steal AWS tokens, CI/CD secrets
Chimera-sandbox-extensions” exploit highlights rising risks of open-source package abuse, prompting calls for stricter ...
Infosecurity Magazine19h
North Korean Hackers Deploy Python-Based Trojan Targeting Crypto
A new Python-based remote access Trojan (RAT) known as PylangGhost is being deployed in cyber campaigns attributed to the ...
Infosecurity Magazine18h
Banana Squad’s Stealthy GitHub Malware Campaign Targets Devs
Discovered by ReversingLabs, the campaign reflects a shift in open-source software supply chain attacks. While overall ...
Decrypt3h
North Korea Targets Crypto Professionals With New Malware in Hiring Scams
Hackers linked to Pyongyang are posing as Coinbase and Uniswap recruiters to deploy "PylangGhost," a Python-based trojan.
SecurityWeek21h
New Campaigns Distribute Malware via Open Source Hacking Tools
Trend Micro and ReversingLabs uncovered over 100 GitHub accounts distributing malware embedded in open source hacking tools.
North Korea targets crypto workers with new info-stealing malware
North Korea is using fake job sites and interviews targeting crypto professionals to deploy a new info-stealing malware, says ...