Latest cybersecurity reporting from selected sources.

Dog-eat-dog world for credential-stealing attackers

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

TeamPCP? Or copycat malware dev?

Where it’s been well and truly forked, seemingly without Microsoft’s code locker noticing

All your compromised credentials are belong to us now instead of the other gang

Mini Shai-Hulud caught spreading credential-stealing malware

Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.…

FAST16 could be the first cyberweapon, and its effects could be with us today Black Hat Asia Infosec outfit SentinelOne found malware that tries to induce errors in engineering and physics simulation software and therefore represents an attempt at sabotage, and suggests it was created years before the Stuxnet worm that aimed to destroy Iran’s uranium enrichment centrifuges.…

Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days A self-propagating malware targeting node package managers (npm) is back for a second round, according to Wiz researchers who say that more than 25,000 developers had their secrets compromised within three days.…

We take a look at low, low subscription prices – not that we want to give anyone any ideas A Tor-hidden website dubbed the Eternity Project is offering a toolkit of malware, including ransomware, worms, and – coming soon – distributed denial-of-service programs, at low prices.…