ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
-
A ransomware affiliate has reportedly betrayed their own operation by keeping the profits for themselves, highlighting that trust issues exist on both sides of the criminal ecosystem. Separately, an attacker left a server exposed with tools and traces of an intrusion, exposing their own toolkit in the process.
The week also saw malicious code surface in developer packages and extensions, continuing a worrying trend of supply chain compromise.
Details remain limited in the source report, so specific identifiers such as CVE IDs are not available at this time. Affected package and extension names, along with mitigation guidance, were not disclosed.
- Review any developer packages and extensions currently in use
- Monitor for signs of unauthorized access or exposed infrastructure
- Treat supply chain components as potential attack vectors until verified
Source: The Hacker News
Are you reviewing your developer dependencies and extensions in light of this week's supply chain activity?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login