Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
Tag: Go
Fake Font: Malicious npm and Go Packages Disguised as Font Files
A cluster of malicious packages that use fake .woff2 font files to conceal JavaScript payloads. Tactically overlaps with TaskJacker and PolinRider, using…
Nextron Systems Uncovers Malicious Go Packages in Supply Chain Attack
Nextron Systems discovered 16 Go packages containing the same malware as the npm packages, targeting the Go ecosystem with a Python infostealer.
Go: Programming Language
ENCFORGE is a compiled Go ransomware, built with Go 1.22.12.
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Overlord: Open-Source Go Framework Used by North Korean Hackers
Overlord is an open-source Go framework repurposed by North Korean threat actors as a cross-platform malware loader for data theft and remote…
Backdoor.Turn: Go-Based RAT Abusing Microsoft Teams TURN
Backdoor.Turn is a Go-based remote access trojan used by DragonForce ransomware to hide C2 traffic inside Microsoft Teams relay infrastructure via QUIC…
CyberStrike Harvester v1.5: Custom Information Extraction Suite Used in FortiBleed
CyberStrike Harvester v1.5 is a Go-based ELF binary used in the FortiBleed campaign to turn passive network captures into actionable credentials, crackable…
Vidar Stealer: Go Variant Used in TELEPUZ Campaign
Vidar Stealer is an information stealer malware, known for harvesting sensitive data from infected hosts. In the TELEPUZ campaign, a Go variant…