T1041 25
- Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
- 77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
- Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign
- Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates
- Malicious NuGet Package Impersonates Sicoob SDK to Exfiltrate Banking Certificates and Passwords
- North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads
- 5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
- Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
- Inside the GitHub Infrastructure Powering North Korea's Contagious Interview npm Attacks
- Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
- North Korea's Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
- 60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
- Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft
- Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
- Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
- Malicious Ruby Gems Exfiltrate Telegram Tokens and Messages Following Vietnam Ban
- Backdooring the IDE: Malicious npm Packages Hijack Cursor Editor on macOS
- The Bad Seeds: Malicious npm and PyPI Packages Pose as Developer Tools to Steal Wallet Credentials
- Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
- Black Basta's Dependency Confusion Ambitions and Ransomware in Open Source Ecosystems
- Lazarus Strikes npm Again with New Wave of Malicious Packages
- North Korean APT Lazarus Targets Developers with Malicious npm Package
- Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
- Typosquatting Cryptographic Libraries: Malicious npm Packages Threaten Crypto Developers with Keylogging and Wallet Theft
- Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets