JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users

JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users,

More details have emerged about the operators behind the first-known phishing campaign specifically aimed at the Python Package Index (PyPI), the official third-party software repository for the programming language.
Connecting it to a threat actor tracked as JuiceLedger, cybersecurity firm SentinelOne, along with Checkmarx, described the group as a relatively new entity that surfaced in early

,

More details have emerged about the operators behind the first-known phishing campaign specifically aimed at the Python Package Index (PyPI), the official third-party software repository for the programming language.
Connecting it to a threat actor tracked as JuiceLedger, cybersecurity firm SentinelOne, along with Checkmarx, described the group as a relatively new entity that surfaced in early

, ,
https://thehackernews.com/2022/09/juiceledger-hackers-behind-recent.html

The Ultimate Security Blind Spot You Don’t Know You Have

The Ultimate Security Blind Spot You Don’t Know You Have

,

How much time do developers spend actually writing code?
According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process, only to surface after an application has been deployed. The disappointing part is that many of these

,

How much time do developers spend actually writing code?
According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process, only to surface after an application has been deployed. The disappointing part is that many of these

, ,
https://thehackernews.com/2022/09/the-ultimate-security-blind-spot-you.html

Warning: PyPI Feature Executes Code Automatically After Python Package Download

Warning: PyPI Feature Executes Code Automatically After Python Package Download,

In another finding that could expose developers to increased risk of a supply chain attack, it has emerged that nearly one-third of the packages in PyPI, the Python Package Index, trigger automatic code execution upon downloading them.
« A worrying feature in pip/PyPI allows code to automatically run when developers are merely downloading a package, » Checkmarx researcher Yehuda Gelb said in a

,

In another finding that could expose developers to increased risk of a supply chain attack, it has emerged that nearly one-third of the packages in PyPI, the Python Package Index, trigger automatic code execution upon downloading them.
« A worrying feature in pip/PyPI allows code to automatically run when developers are merely downloading a package, » Checkmarx researcher Yehuda Gelb said in a

, ,
https://thehackernews.com/2022/09/warning-pypi-feature-executes-code.html

Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier

Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier,

,

En raison d’un bug, les sites web peuvent altérer le contenu du presse-papier à n’importe quel moment, sans que cela soit lié à une action de l’utilisateur. Ce qui est plutôt dangereux.

L’article Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/une-faille-dans-chrome-permet-aux-sites-de-modifier-en-douce-votre-presse-papier.html

New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers

New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers,

Researchers have identified functional similarities between a malicious component used in the Raspberry Robin infection chain and a Dridex malware loader, further strengthening the operators’ connections to the Russia-based Evil Corp group.
The findings suggest that « Evil Corp is likely using Raspberry Robin infrastructure to carry out its attacks, » IBM Security X-Force researcher Kevin Henson 

,

Researchers have identified functional similarities between a malicious component used in the Raspberry Robin infection chain and a Dridex malware loader, further strengthening the operators’ connections to the Russia-based Evil Corp group.
The findings suggest that « Evil Corp is likely using Raspberry Robin infrastructure to carry out its attacks, » IBM Security X-Force researcher Kevin Henson 

, ,
https://thehackernews.com/2022/09/new-evidence-links-raspberry-robin.html

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content,

A « major » security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them.
The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104, according to developer Jeff Johnson.
While the

,

A « major » security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them.
The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104, according to developer Jeff Johnson.
While the

, ,
https://thehackernews.com/2022/09/google-chrome-bug-lets-sites-silently.html

Une fausse application Google mine des cryptomonnaies sur des milliers de PC

Une fausse application Google mine des cryptomonnaies sur des milliers de PC,

,

monero crypto

Une fausse application Google Traduction se propage sur la toile. Elle cache un malware capable de miner du Monero, une cryptomonnaie très appréciée des cybercriminels, avec l’ordinateur des internautes.

L’article Une fausse application Google mine des cryptomonnaies sur des milliers de PC est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/fausse-application-google-mine-cryptomonnaies-milliers-pc.html

Stop Worrying About Passwords Forever

Stop Worrying About Passwords Forever,

So far 2022 confirms that passwords are not dead yet. Neither will they be anytime soon. Even though Microsoft and Apple are championing passwordless authentication methods, most applications and websites will not remove this option for a very long time.
Think about it, internal apps that you do not want to integrate with third-party identity providers, government services, legacy applications,

,

So far 2022 confirms that passwords are not dead yet. Neither will they be anytime soon. Even though Microsoft and Apple are championing passwordless authentication methods, most applications and websites will not remove this option for a very long time.
Think about it, internal apps that you do not want to integrate with third-party identity providers, government services, legacy applications,

, ,
https://thehackernews.com/2022/09/stop-worrying-about-passwords-forever.html

Researchers Detail Emerging Cross-Platform BianLian Ransomware Attacks

Researchers Detail Emerging Cross-Platform BianLian Ransomware Attacks,

The operators of the emerging cross-platform BianLian ransomware have increased their command-and-control (C2) infrastructure this month, a development that alludes to an increase in the group’s operational tempo.
BianLian, written in the Go programming language, was first discovered in mid-July 2022 and has claimed 15 victim organizations as of September 1, cybersecurity firm [redacted] said in

,

The operators of the emerging cross-platform BianLian ransomware have increased their command-and-control (C2) infrastructure this month, a development that alludes to an increase in the group’s operational tempo.
BianLian, written in the Go programming language, was first discovered in mid-July 2022 and has claimed 15 victim organizations as of September 1, cybersecurity firm [redacted] said in

, ,
https://thehackernews.com/2022/09/researchers-detail-emerging-cross.html

Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials

Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials,

Researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services (AWS) credentials, posing a major security risk.
« Over three-quarters (77%) of the apps contained valid AWS access tokens allowing access to private AWS cloud services, » Symantec’s Threat Hunter team, a part of Broadcom Software, said in a report shared with The Hacker News.
Interestingly, a

,

Researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services (AWS) credentials, posing a major security risk.
« Over three-quarters (77%) of the apps contained valid AWS access tokens allowing access to private AWS cloud services, » Symantec’s Threat Hunter team, a part of Broadcom Software, said in a report shared with The Hacker News.
Interestingly, a

, ,
https://thehackernews.com/2022/09/over-1800-android-and-ios-apps-found.html