Blind Eagle-Linked Loader Uses GitHub, VBScript, PowerShell and InstallUtil to Deploy AsyncRAT
Researchers have uncovered a Blind Eagle-linked malware operation that uses GitHub repositories, phishing lures, VBScript, PowerShell, and the legitimate Windows InstallUtil utility to deploy...
Researchers Find 28,000 Exposed Git Repositories Leaking API Keys, Bank Details and Corporate Secrets
Security researchers have discovered 28,000 publicly accessible Git repositories exposing API keys, bank-related information, corporate data, and other sensitive secrets.
The findings came from a...
ChainDrop npm Worm Hijacks GitHub Actions OIDC to Poison 444 Packages With Valid SLSA Provenance
A new npm supply-chain campaign, tracked as ChainDrop and also called Mini Shai-Hulud, shows how attackers can turn trusted developer tools into a worm...
Fake AI Developer Tools Deliver Infostealers to Steal Credentials and Cloud API Keys
Cybercriminals are increasingly targeting AI developers by cloning trusted GitHub repositories and hiding malware inside fake developer tools.
Netskope Threat Labs has linked the...
AsyncAPI npm Supply Chain Attack Deploys Miasma RAT via Compromised GitHub Actions
AsyncAPI’s npm ecosystem was hit by a supply chain attack that used compromised GitHub Actions workflows to distribute a Miasma-associated remote access trojan (RAT)....