Tag: Supply Chain Attack
Adform tracker hack redirected crypto payments to attacker wallets
A poisoned JavaScript file served by ad tech firm Adform rewrote crypto wallet addresses on customer sites.
Amazon ties debug and chalk npm hijacks to North Korean hackers
Amazon attributes the debug and chalk npm hijacks to the North Korean group behind the axios attack.
XCSSET v40 returns with memory-only macOS supply chain attacks
The XCSSET malware returns as v40 with memory-only execution and a new Chrome-hijacking module.
NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
Hugging face says autonomous AI agent breached its infrastructure
Hugging Face confirmed an autonomous AI agent breached its infrastructure through a malicious dataset in the company's data processing pipeline.
North Korea hides OtterCookie malware inside SVG flag images in fake coding tests
North Korean threat actors embed malware payload fragments inside SVG country flag images distributed through fake developer job interviews and…
Google and Microsoft pull ModHeader extension with 1.6 million installs
Google and Microsoft removed the ModHeader browser extension from their stores after discovering a dormant data collector in a March…