Hackers Exploit PyInstaller to Deliver Undetectable macOS Infostealer
Jamf Threat Labs has identified a new wave of undetected macOS infostealer samples, leveraging the legitimate open-source utility PyInstaller to embed Python-based malware within...
Malicious Python Package Poses as Discord Developers to Execute Remote Commands
A Python package named ‘discordpydebug’ was uploaded to the Python Package Index (PyPI), masquerading as a legitimate debugging tool for Discord bot developers.
Promoted under...
Malicious npm and PyPI Packages Disguised as Dev Tools to Steal Credentials
The Socket Threat Research Team has identified a new supply chain threat targeting developers in the crypto space: three malicious packages one on npm...
Slow Pisces Hackers Target Developers with Malicious Python Coding Tests
Cybersecurity researchers have uncovered a sophisticated campaign by North Korean state-sponsored threat actors targeting cryptocurrency developers with malicious coding challenges.
According to a report...
AkiraBot’s CAPTCHA‑Cracking, Network‑Dodging Spam Barrage Hits 80,000 Websites
A new wave of sophisticated spam, powered by the Python-based framework AkiraBot, has targeted over 400,000 websites and successfully spammed at least 80,000 domains...
