BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers
Briefly

from The Hacker News3 months ago
The investigation revealed that three malicious npm packages published in September 2024 contained BeaverTail malware, part of North Korean cyber operations targeting developers.
The Hacker Newshttps://thehackernews.com/2024/10/beavertail-malware-resurfaces-in.html
Contagious Interview represents a yearlong DPRK campaign aimed at luring developers into downloading malicious applications disguised as coding tests, first discovered in November 2023.
The Hacker Newshttps://thehackernews.com/2024/10/beavertail-malware-resurfaces-in.html
The use of npm packages to deploy malware like BeaverTail has been a repeated tactic for DPRK threat actors, highlighting a troubling trend in supply chain attacks.
The Hacker Newshttps://thehackernews.com/2024/10/beavertail-malware-resurfaces-in.html
The cryptocurrency sector is particularly vulnerable, as demonstrated by the continued targeting of etherscan-api clones and new counterfeit packages that aim to harvest cryptocurrencies.
The Hacker Newshttps://thehackernews.com/2024/10/beavertail-malware-resurfaces-in.html
Read at The Hacker News
#npm #malware #north-korea #cryptocurrency #supply-chain-attacks
[
|
]