BBTok Hackers Target Organizations with PowerShell, Python, & dnlib
A C#-based malware loader, Trammy.dll, obfuscated with ConfuserEx, is part of a complex infection chain initiated by an ISO image email, which uses AppDomain...
Weaponized Python Packages Drop PondRAT Linux and MacOS Backdoors
Gleaming Pisces, a North Korean threat actor, has been active since 2018, targeting the cryptocurrency industry by using fake trading software to infiltrate systems...
North Korean Hackers Poison Python Packages to Target Linux & MacOS Users
Researchers have identified a new malware campaign targeting supply chains through poisoned Python packages. The malicious software, dubbed PondRAT, is a lightweight version of...
Malicious Python Packages Steal Your Data – Beware!
Malicious Python packages uploaded by “dsfsdfds” to PyPI deploy a script hidden within the __init__.py file, which scans the victim's system, targeting the root...
