malware Archives - Developer Tech News

PyPI suspends registrations amid malware attack

Ryan Daws — Thu, 28 Mar 2024 12:52:52 +0000

The Python Package Index (PyPI) has suspended new project creation and user registration to mitigate an ongoing malware upload campaign. This move comes as security researchers at Checkmarx uncovered a campaign involving multiple malicious packages related to the same threat actors. The attackers are targeting victims through typosquatting attacks, tricking users into installing malicious Python... Read more »

The post PyPI suspends registrations amid malware attack appeared first on Developer Tech News.

GitHub suffers from over 100K infected repos

Ryan Daws — Thu, 29 Feb 2024 12:01:58 +0000

Developers face a major security threat as over 100,000 repositories on GitHub are infected with malicious code. This resurgence of a malicious repo confusion campaign – detected by Apiiro’s security researchers – has impacted countless developers who unwittingly use repositories they believe to be trusted but are, in fact, compromised. Similar to dependency confusion attacks... Read more »

The post GitHub suffers from over 100K infected repos appeared first on Developer Tech News.

Android finally checks sideloaded apps for malware before installs

Ryan Daws — Thu, 19 Oct 2023 16:12:38 +0000

In response to growing cyber threats, Google has introduced an update to bolster Android security. This enhancement focuses on strengthening malware detection before app installations, ensuring a safer Android ecosystem. With this update, Google Play Protect now conducts real-time scans at the code-level during the app installation process: By providing users with immediate feedback about... Read more »

The post Android finally checks sideloaded apps for malware before installs appeared first on Developer Tech News.

Clipper malware found in over 451 PyPI packages

Ryan Daws — Wed, 15 Feb 2023 17:16:49 +0000

Phylum security researchers have discovered over 451 packages on the Python Package Index (PyPI) that are infected with “clipper” malware. Clippers replace the contents of a victim’s clipboard with something which benefits the attacker. The most prevalent clippers today look for cryptocurrency addresses and modify them to steal funds. Starting on February 9th, Phylum was... Read more »

The post Clipper malware found in over 451 PyPI packages appeared first on Developer Tech News.

Malware campaign targets official Python and JavaScript repos

Ryan Daws — Tue, 13 Dec 2022 16:38:38 +0000

An active malware campaign is targeting official Python and JavaScript repositories. Software supply chain security firm Phylum spotted the campaign. Phylum said that it discovered the campaign after noticing a flurry of activity around typosquats of the popular Python requests package. Typosquats take advantage of simple typos to install malicious packages. In this case, the... Read more »

The post Malware campaign targets official Python and JavaScript repos appeared first on Developer Tech News.

Syntax error breaks KmsdBot cryptomining botnet

Ryan Daws — Tue, 06 Dec 2022 13:36:43 +0000

A syntax error broke an otherwise advanced cryptomining botnet called KmsdBot. The malware, which could also be used for distributed denial-of-service (DDoS) attacks, was discovered by Akamai Security Research. Akamai’s researchers witnessed the authors “accidentally crash” KmsdBot after observing the malware stopped sending attack commands after receiving: The lack of a space between the website... Read more »

The post Syntax error breaks KmsdBot cryptomining botnet appeared first on Developer Tech News.

Cyber Security & Cloud Expo: Examining the 2022 malware landscape

Ryan Daws — Fri, 23 Sep 2022 11:28:42 +0000

Geopolitical tensions and the largest war in Europe for decades have defined the malware landscape in 2022. Recorded Future has been capturing global threat information from the internet, dark web, and technical sources for over a decade. The firm combines this vast amount of data with AI and human expertise to spot threats early and... Read more »

The post Cyber Security & Cloud Expo: Examining the 2022 malware landscape appeared first on Developer Tech News.

Apple letter urges lawmakers to reject sideloading bill

Ryan Daws — Fri, 04 Feb 2022 11:26:32 +0000

Apple has written a letter urging lawmakers to reject a bill that would force the company to allow any apps to be installed on its mobile operating systems. The letter, addressed to Senate Judiciary Chair Dick Durbin and Republican Chuck Grassley, claims the proposed bill will hurt user privacy and security if passed. In question... Read more »

The post Apple letter urges lawmakers to reject sideloading bill appeared first on Developer Tech News.

Play Store’s AI security blocks almost one million policy-violating apps

Ryan Daws — Thu, 22 Apr 2021 14:32:25 +0000

Google’s AI-powered Play Store security has blocked almost one million policy-violating apps from reaching users. In a blog post, Google detailed what it’s been doing to protect the billions of Android users and millions of developers creating apps for the world’s largest mobile platform. 2020 was a year when many of us made sacrifices to... Read more »

The post Play Store’s AI security blocks almost one million policy-violating apps appeared first on Developer Tech News.

Report: Developing markets are suffering a mobile malware pandemic

Ryan Daws — Wed, 21 Apr 2021 09:00:56 +0000

Anti-fraud platform Secure-D has released a report highlighting the mobile malware pandemic that developing markets are suffering. The report is based on Secure-D’s processing of one billion mobile transactions and service sign-ups for 35 mobile operators in 23 emerging markets, helping to protect a total of almost 840 million users. Secure-D detected 46,000 malicious apps;... Read more »

The post Report: Developing markets are suffering a mobile malware pandemic appeared first on Developer Tech News.