/
initial_access_vector:supply_chain_compromise × latest_source_host:thehackernews.com × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

MALFEX npm campaign: 'imgdecode' package hides shellcode loader in Windows native addon, delivers Node.js stealer/RAT

Researchers at SafeDep identified imgdecode, a malicious npm package tied to the long-running MALFEX supply chain campaign first documented by Checkmarx and CloudSEK. Published on September 30, 2026 by user "malfexteste8", it has been downloaded 979 times and was still available at the time of reporting (latest version 1.0.3). MALFEX has …

technology software development
thehackernews.com · high

UNC7017 tampers with AOMEI Backupper update servers in short windows to deliver CROSSROAD and SHINYROAD backdoors

Between May and July 2026, attackers tracked by Google Threat Intelligence Group (GTIG) as UNC7017 altered files on AOMEI's own update servers for windows of 5 to 10 minutes. Any copy of AOMEI Backupper that checked for updates during a window downloaded and ran a backdoor. GTIG, Mandiant and ManageEngine's Threat Analysis Lab disclosed t…

UNC7017 it services telecommunications