⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A North Korean-linked threat group has been deploying a sophisticated macOS malvertising campaign that tricks users into executing malware via fake software updates. The attack, part of the long-running Contagious Interview campaign (also known as UNC5342), displays a full-screen fake macOS update sequence, copying a malicious command to the clipboard and prompting victims to paste it into Terminal.
This article details a sophisticated macOS malvertising campaign linked to North Korea that uses fake update pages to trick users into executing malware via the ClickFix technique. The campaign employs blockchain-hosted command-and-control and aims to steal cryptocurrency and deploy malicious extensions.
This article describes a sophisticated macOS malvertising campaign attributed to North Korean threat actors, where users are redirected to fake web pages displaying a full-screen update sequence to deliver crypto-stealing malware. The attack is part of the ongoing Contagious Interview campaign.
Amazon has linked several high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers, specifically involving the Debug and Chalk packages. These attacks highlight ongoing threats to the open-source supply chain.
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers.
Broadcom has released security updates to address five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that could enable attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. Users are urged to apply the patches promptly.