3 threads tagged with “credential theft”
Socket discovered 10 malicious npm packages delivering infostealer malware across Windows, Linux, and macOS. What's sophisticated: 4 layers of obfuscation hide payloads, fake CAPTCHA appears legitimat…
Category: Threat Alerts / Supply Chain / Supply Chain
Koi Security discovered PhantomRaven campaign compromising 86,000+ npm downloads via Remote Dynamic Dependencies (RDD)—an obscure npm feature allowing HTTP URLs as package dependencies. What's clever:…
Category: Threat Alerts / Supply Chain / Supply Chain
Cofense researchers analyzed a sophisticated phishing campaign leveraging randomized .org domains and dynamic page replacement to bypass Secure Email Gateways (SEGs). The phishing script uses dual UUI…
Category: Threat Alerts / Threat Intelligence / Phishing & Credential Theft