Inside of the WASP’s nest: deep dive into PyPI-hosted malware
Photo by Matheus Queiroz on Unsplash In late 2022 we decided to start monitoring PyPI, arguably the most important Python repository, as there were a number of reports on it hosting malware. PyPI took exceptional relevance amongst all repositories as, historically, it was trusted by default by many software developers. Any security breach or abuse […] more…APT43: An investigation into the North Korean group’s cybercrime operations
Introduction As recently reported by our Mandiant’s colleagues, APT43 is a threat actor believed to be associated with North Korea. APT43’s main targets include governmental institutions, research groups, think tanks, business services, and the manufacturing sector, with most victims located in the United States and South Korea. The group uses a variety of techniques and […] more…The Tetrade: Brazilian banking malware goes global
Introduction Brazil is a well-known country with plenty of banking trojans developed by local crooks. The Brazilian criminal underground is home to some of the world’s busiest and most creative perpetrators of cybercrime. Like their counterparts’ in China and Russia, their cyberattacks have a strong local flavor, and for a long time, they limited their […] more…More information
- Microsoft warns hospitals about VPN cyberattacks during coronavirus
- Flaws Allow Remote Hacking of Moxa MiiNePort Devices
- Mitigating Digital Risk from the Android PC in Your Pocket
- Internet giants call for transparency in government surveillance requests
- Sage X3 Vulnerabilities Can Pose Serious Risk to Organizations
- Tech-Assisted COVID-19 Tracking Is Having Some Issues
- Massive payment card upgrade has mixed results in Australia
- COVID-19 forces browser makers to continue supporting TLS 1.0
- Microsoft Word CVE-2013-3850 Remote Memory Corruption Vulnerability
- Flaws in Accusoft ImageGear Expose Users to Remote Attacks