‘TrapDoor’ malware targets crypto dev tools in supply chain attack

Hackers secretly targeted crypto and AI developers using TrapDoor malware, stealing wallets, credentials, SSH keys, and sensitive company network access data. A sneaky cyberattack is targeting software developers. Specifically, it is dedicated to individuals who are involved in cryptocurrency and AI. The attack was discovered on Friday by a company called Socket. They then published […] The post Hackers Secretly Target Crypto Developers With Dangerous TrapDoor Malware appeared first on Live Bitcoin News.

The malware spread through npm, PyPI, and Rust packages in coordinated waves. It steals crypto wallets, SSH keys, and cloud developer credentials. AI coding tools were also targeted through malicious config files. A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers. Security researchers identified dozens of […] The post TrapDoor attack targets crypto wallets, AWS keys and GitHub tokens appeared first on CoinJournal.

Software designed to remove safety protections creates systems that provide responses on biological weapons and malware

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

Mini Shai-Hulud npm campaign compromises @antv packages, targeting blockchain developers’ GitHub tokens, AWS keys, and CI/CD secrets in a coordinated supply chain attack. The malicious publishes started just before 2 a.m. UTC on May 19. By the time most developers on the East Coast had their first coffee, the damage was already done. Socket’s Threat […] The post npm Supply Chain Attack Hits @antv: Blockchain Dev Secrets Now Exposed appeared first on Live Bitcoin News.

The cybersecurity threats from North Korea are perpetrated by a myriad of small hacker groups deploying malware and executing social engineering scams.

Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI software download distributed through a Python package.

In this tutorial, we explore how FLARE-FLOSS helps us recover hidden and obfuscated strings from a Windows PE file. We begin by setting up FLOSS and the MinGW-w64 cross-compiler. We synthesize a small malware-like executable that hides strings using multiple techniques, including static strings, stack-built strings, tight strings, and XOR-decoded strings. After that, we compare […] The post A Coding Implementation to Recover Hidden Malware IOCs with FLARE-FLOSS Beyond Classic Strings Analysis appeared first on MarkTechPost.