Topic: command-and-control infrastructure
-
Malicious npm Packages Target Ethereum Smart Contracts
A new wave of malicious npm packages uses Ethereum smart contracts to hide command-and-control infrastructure, making detection more difficult. Attackers also created fake GitHub repositories with artificially inflated metrics to appear legitimate and target cryptocurrency developers. This campai...
Read More » -
LummaStealer Surges Following CastleLoader Malware Campaigns
A major resurgence of LummaStealer malware is being driven by sophisticated social engineering campaigns that use a technique called ClickFix to deploy the CastleLoader. The attacks rely on CastleLoader, a highly obfuscated and modular malware loader that checks for security software and sandboxe...
Read More »