Ataque MALFEX: El Descubrimiento del Paquete Malicioso ‘imgdecode’ de npm Introducción a la Campaña MALFEX En un desarrollo preocupante para la comunidad de desarrollo de software, los investigadores en ciberseguridad han descubierto un paquete malicioso de npm que está vinculado a una campaña más amplia de ataque a la cadena de suministro de software conocida…
MALFEX Attack: The Discovery of Malicious ‘imgdecode’ npm Package Introduction to the MALFEX Campaign In a concerning development for the software development community, cybersecurity researchers have uncovered a malicious npm package that is linked to a broader software supply chain attack campaign known as MALFEX. This revelation raises alarms about the security and integrity of…
Unveiling the Connection: Discover-Tech’s Role in Delivering Candiru’s Zero-Click Spyware Background and Context Recent revelations have highlighted a disturbing intersection between digital advertising and advanced cyber espionage, specifically involving the Israeli ad firm Discover-Tech and the notorious zero-click spyware developed by Candiru. This incident underscores a broader trend where seemingly benign technological services can be…