Tron Blockchain: Decentralized Platform
The Tron blockchain is used in a supply chain attack as a second-stage C2 relay to encode commands via transaction hashes.
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
Binance Smart Chain (BSC): Blockchain
Binance Smart Chain (BSC) is used in conjunction with the Tron blockchain to encode active payloads in transaction hashes.
Stitch AI: Google Design Tool
Stitch AI is a Google design tool that was impersonated by a malicious npm package to steal developer credentials.
Claude Code: AI Coding Agent with Security Flaw
Claude Code is Anthropic's AI coding agent. It was found to have a vulnerability (CVE-2026-54316) that allowed data exfiltration via Hugging Face's…
PostCSS: CSS Processing Tool
PostCSS is a legitimate CSS processing tool with millions of weekly npm downloads, which was impersonated by malicious packages to deliver malware.
npm: Package Registry and Attack Vector
npm is the JavaScript package registry that was abused in the worm campaign. The malicious packages were published via stolen npm identities,…
GitHub: Code Hosting Platform
Used by Rapid7 to publish indicators of compromise (IOCs) for the campaign.
Chrome Browser’s Passkey Implementation Under Fire
Chrome's handling of passkey device keys and security domain secrets has been scrutinized, with researchers demonstrating potential attack vectors that could compromise…
Chrome Extensions: Browser Add-ons
Chrome extensions are browser add-ons that the RAT targets to collect data, highlighting risks to developer tools.
Node.js v24.13.0 Used as Implant Runtime
The phishing campaign downloads a legitimate Node.js v24.13.0 runtime from nodejs.org to execute the TonRAT implant in user space.