Supply Chain Attack in NPM Steals Credentials
The MUT-1244 threat actor has been identified as the group behind the sophisticated supply-chain attack targeting the @0xengine/xmlrpc package. This group has been active for over a year, using multiple…
Legion Abuses Cloud in its Attack
Researchers have identified a tool dubbed as Legion that can scan Shodan to identify misconfigured cloud servers and then take over SMTP email marketing programs or launch phishing campaigns. Legion…