This Week in Malware — Killing Windows Defender with an npm package
3 minute read time
This Week in Malware we discuss a malicious npm package that disables Windows Defender before dropping a trojan, and ongoing dependency confusion findings.
Read More...
This Week in Malware — npm malware exfiltrates Windows SAM, Amazon EC2 credentials
4 minute read time
Malicious packages caught this week exfiltrate Amazon EC2, Windows SAM credentials, and launch malicious executables.
Read More...
This Week in Malware — Malicious Rust crate, 'colors' typosquats
5 minute read time
From a malcious Rust typosquat found in the crates[.
Read More...
This Week in Malware — Apache Kafka typosquats, shorthand data exfiltration
4 minute read time
This Week In Malware—May 6th edition: Apache Kafka typosquat, and a simple distraction technique.
Read More...
In a special edition of This Week in Malware, we change focus and look at protestware and the tale of a two-year-old Struts bug that's returned.
Read More...
This Week in Malware — VMware, secrets, and security by obscurity
2 minute read time
This week in malware digest for 8th April 2022: VMWare dependency confusion attempt and the importance of secrets management.
Read More...
This Week in Malware — A 'fix-crash' info-stealer and 500+ malicious npm packages
6 minute read time
This week in malware—Dive Deep into this week's findings from Sonatype's automated malware detection system.
Read More...