/
vendors:Hetzner × criticity:high × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

Typosquat npm chain ioredis-xyz → redis-type-xyz → ulid-xyz delivers MicrosoftSystem64 RAT, linked to DPRK FAMOUS CHOLLIMA

SafeDep flagged the malicious npm package ulid-xyz in June 2026. It typosquats ulidx and is a cross-platform remote access trojan. It is delivered through a three-layer transitive dependency chain: ioredis-xyz (a clone of the legitimate ioredis client) depends on redis-type-xyz (an empty manifest posing as Redis OM), which in version 1.10…

FAMOUS CHOLLIMA technology software development
unit42.paloaltonetworks.com · high

Iranian-aligned CL-STA-1178 'Blinder Tunnel' campaign hits Iraqi critical infrastructure with trojanized Dubai Airports coding lures

Unit 42 attributes with high confidence to an Iranian state-aligned actor, tracked as CL-STA-1178, a campaign called Blinder Tunnel. In March 2026 it targeted an individual in Iraq's critical infrastructure sector, after infrastructure staging that began as early as November 2025. The actor impersonated the Dubai Airports IT department an…

CL-STA-1178 critical infrastructure telecommunications