Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Read More Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive data. The activity is being tracked by ReversingLabs as the Ghost campaign. The list of identified packages, all...
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials
Read More Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor known as TeamPCP, the cloud-native cybercriminal operation also behind the Trivy supply chain attack. The workflows, both maintained...
U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage
Read More A 26-year-old Russian citizen has been sentenced in the U.S. to 6.75 years (81 months) in prison for his role in assisting major cybercrime groups, including the Yanluowang ransomware crew, in conducting numerous attacks against U.S. companies and other...