Tag: Node.js
Malware hides in a B-tree library now that npm blocks install hooks
A malicious npm package pulled two million weekly downloads while running its payload from ordinary library code instead of an…
Signed node.exe is latest cover for malware delivery, Symantec finds
Symantec documents attackers abusing signed node.exe to run JavaScript payloads in intrusions since February.
Iran-linked job scam bans AI help that could flag its hidden RAT
Kaspersky ties fake coding tests with a no-AI rule to two new Iranian RATs built for Windows, Linux, and macOS.
Iranian Threat Group Expands Global Espionage With DLL Side Loading Technique
The campaign abused legitimate signed binaries from Fortemedia and SentinelOne to bypass security detection while targeting industrial, financial, and transportation…