North Korea’s state-sponsored hacking collective, the Lazarus Group, has launched a sophisticated campaign targeting software developers through the npm ecosystem. By introducing six malicious ...

The North Korean Lazarus Group, which recently stole $1.5 billion from the crypto exchange Bybit, is targeting developers via npm, a library and registry of JavaScript.

According to Kaspersky, this criminal scheme works as follows: Attackers, pretending to be the developers of the tool for ...

Six malicious packages have been identified on npm (Node package manager) linked to the notorious North Korean hacking group ...

Security firm Kaspersky has flagged that YouTubers are being blackmailed into promoting crypto mining malware.

The end is nigh for Microsoft's Remote Desktop application. The IT giant will pull support on May 27 when users must ...

Blind Eagle has been running campaigns targeting the Colombian government with malicious .url files and phishing attacks ...

Blind Eagle targeted 1,600 victims in Colombia using spear-phishing, exploiting CVE-2024-43451, and distributing malware via ...

Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode ...