6lowecase6

Popular Rust package compromise, multi-ecosystem typosquatting attack, trends in binary payloads

Shared IOCs confirm StubMaker campaign originally discovered in Ruby was pushed concurrently to npm

The malware fingerprints victims, downloads a Windows loader, and deploys an encrypted Go infostealer

Live from Hacker Summer Camp! Keyv and cacheable npm worm, WEL1DROPPER AI slopsquatting campaign, NullReceiver DPRK C2 technique.

How you get infected with DPRK's PolinRider, why just rotating creds and wiping laptops doesn't stop it from coming back, and the field-tested steps that do.

Live from Hacker Summer Camp! Keyv and cacheable npm worm, WEL1DROPPER AI slopsquatting campaign, NullReceiver DPRK C2 technique.

NUL1DROPPER, aka Flooding Dropper, is a new downloader targeting mobile SDK installs a RAT to Windows, Mac, and Linux with no install script required

Malware based on the open-sourced Mini Shai-Hulud worm steals GitHub, npm, AWS, and cloud credentials

DPRK's new technique hides C2 IP address inside recipient of a completely empty Ethereum transfer

Hugging Face update, GitHub ships more security improvements, DPRK linked to chalk/debug attack, new PolinRider research