#javascriptmalware — Public Fediverse posts

PureLogs Infostealer Exploits Purchase Order Phishing Lures

Beware of purchase order phishing scams that can deliver a powerful infostealer, capable of stealing sensitive credentials and cryptocurrency keys, via a simple yet cleverly disguised email with a malicious RAR attachment. Even security software can be fooled, as one campaign was only flagged as a threat after it was already…

https://osintsights.com/purelogs-infostealer-exploits-purchase-order-phishing-lures?utm_source=mastodon&utm_medium=social

#PurchaseOrderPhishing #Infostealer #FilelessMalware #JavascriptMalware #RarArchive

Axios npm Account Hijacked, Malware Injected

Axios npm account hijacked, malware injected into popular JavaScript library. Developers using versions 1.14.1 or 0.30.4 are at risk. Learn how to protect your code.

#AxiosAttack, #npmSecurity, #JavaScriptMalware, #CyberSecurity, #SoftwareSupplyChain

https://newsletter.tf/axios-npm-malware-attack-developers-risk/

Malicious code was put into the popular Axios JavaScript library for 3 hours. This is a new risk for developers using npm.

#AxiosAttack, #npmSecurity, #JavaScriptMalware, #CyberSecurity, #SoftwareSupplyChain
https://newsletter.tf/axios-npm-malware-attack-developers-risk/

Cyble Detects Phishing Campaign Using Telegram Bots to Siphon Corporate Credentials https://thecyberexpress.com/phishing-telegram-bots-steal-credentials/ #CentralEuropeCyberThreats #ThreatIntelligenceNews #PhishingCampaign2025 #SelfContainedMalware #EmailSecurityBypass #ThreatIntelligence #TelegramBotMalware #JavaScriptmalware #MicrosoftPhishing #TelegramAPIAbuse #CredentialTheft #InvoicePhishing #FirewallDaily #AdobePhishing #Cybleresearch #PressRelease #ThreatActors #HTMLPhishing #RFQPhishing

Cyble Detects Phishing Campaign Using Telegram Bots to Siphon Corporate Credentials https://thecyberexpress.com/phishing-telegram-bots-steal-credentials/ #CentralEuropeCyberThreats #ThreatIntelligenceNews #PhishingCampaign2025 #SelfContainedMalware #EmailSecurityBypass #ThreatIntelligence #TelegramBotMalware #JavaScriptmalware #MicrosoftPhishing #TelegramAPIAbuse #CredentialTheft #InvoicePhishing #FirewallDaily #AdobePhishing #Cybleresearch #PressRelease #ThreatActors #HTMLPhishing #RFQPhishing

jQuery Attack Hits NPM and GitHub; Can Extract Web Form Data https://thecyberexpress.com/jquery-attack-hits-npm-github/ #GitHubVulnerability #TheCyberExpressNews #CybersecurityNews #JavaScriptmalware #Vulnerabilities #TheCyberExpress #FirewallDaily #npmExploit

jQuery Attack Hits NPM and GitHub; Can Extract Web Form Data https://thecyberexpress.com/jquery-attack-hits-npm-github/ #GitHubVulnerability #TheCyberExpressNews #CybersecurityNews #JavaScriptmalware #Vulnerabilities #TheCyberExpress #FirewallDaily #npmExploit