Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
This was not a single company breach, the credentials were harvested from millions of infected user devices using infostealer malware. Binance appeared in the dataset ...
The Chinese espionage threat group Mustang Panda has updated its CoolClient backdoor to a new variant that can steal login ...