Inside of the WASP’s nest: deep dive into PyPI-hosted malware
Photo by Matheus Queiroz on Unsplash In late 2022 we decided to start monitoring PyPI, arguably the most important Python repository, as there were a number of reports on it hosting malware. PyPI took exceptional relevance amongst all repositories as, historically, it was trusted by default by many software developers. Any security breach or abuse […] more…APT43: An investigation into the North Korean group’s cybercrime operations
Introduction As recently reported by our Mandiant’s colleagues, APT43 is a threat actor believed to be associated with North Korea. APT43’s main targets include governmental institutions, research groups, think tanks, business services, and the manufacturing sector, with most victims located in the United States and South Korea. The group uses a variety of techniques and […] more…Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
In Q2 2018, Kaspersky Lab published two blogposts about Roaming Mantis sharing details of this new cybercriminal campaign. In the beginning, the criminals used DNS hijacking in vulnerable routers to spread malicious Android applications of Roaming Mantis (aka MoqHao and XLoader), spoofing legitimate applications such as Facebook and Chrome. During our research, it became clear […] more…More information
- Oleria Secures $33M Series A Investment
- EU ‘smart borders’ program could lead to Big Brother surveillance, says leading politician
- Kenya’s cybersecurity concerns on the rise
- Cisco boosts Webex on iPad with Stage Manager and better multitasking
- Abandoned subdomains pose security risk for businesses
- Mobile enterprise management tools are targeted by spyphones, researchers warn
- The 5 worst big data privacy risks (and how to guard against them)
- Apache patch proves patchy – now you need to patch the patch
- Chrome to Mark HTTP Connections as Non-Secure
- Ebay’s Founder Is Giving Away $10 Million to Support AI That Is Good and Not Evil