News

latesthackingnews.com14d

PXA Python Malware Targets Thousands Of Victims Globally

A new malware campaign has affected users globally, stealing sensitive data. Identified as PXA stealer, this Python-based ...
Hosted on MSN10mon

Crypto-stealing malware discovered in Python Package Index - MSN

Researchers at the Checkmarx cybersecurity firm sounded the alarm on a dangerous form of malware uploaded to the Python Package Index (PyPI) — a platform for Python developers to download and ...
Bleeping Computer11mon

Fake password manager coding test used to hack Python developers

Members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware.
Infosecurity-magazine.com1y

Python Malware Poses DDoS Threat Via Docker API Misconfiguration

Static analysis of the malware’s ELF executable revealed a 64-bit, statically linked ELF with intact debug information, indicating Python code compiled with Cython. The code is relatively short, ...
The Hacker News12d

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

PyPI malware termncolor and colorinal downloaded 884 times exploit DLL side-loading, persistence, and C2 communication.
Infosecurity Magazine2d

Malicious VS Code Extensions Exploit Name Reuse Loophole

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

Python survey shows growth even as Foundation funding falters

The Python Software Foundation (PSF), in association with tools vendor JetBrains, has published the eighth Python Developer ...
CoinTelegraph10mon

Crypto-stealing malware discovered in Python Package Index — Checkmarx

For the second time since March, a cybersecurity firm has discovered troubling malware software packages uploaded to the Python Package Index platform.