3 casos · pág. 1/1
Recorded Future's Insikt Group tracks the actor behind the October 2026 intrusions into South Korean financial institutions as TAG-217, a suspected Chinese-speaking operator. It is not confirmed as state-backed (gbhackers.com). South Korea's Financial Services Commission (FSC) disclosed the attacks in early October (recordedfuture.com). P…
Researchers at SafeDep identified imgdecode, a malicious npm package tied to the long-running MALFEX supply chain campaign first documented by Checkmarx and CloudSEK. Published on September 30, 2026 by user "malfexteste8", it has been downloaded 979 times and was still available at the time of reporting (latest version 1.0.3). MALFEX has …
Kaspersky researchers describe a new MacSync macOS infostealer variant, first seen in the wild in September 2026, that replaces the earlier AppleScript-based droppers with FAT Mach-O binaries written in Objective-C and Swift. MacSync is sold as malware-as-a-service, so delivery varies by operator. In this campaign it spread through malici…
