#threatactors — Public Fediverse posts

Threat Actors Exploit Node.js in Targeted Attacks

Malicious actors have compromised at least 31 organizations by exploiting Node.js, a trusted developer tool, to deliver long-running implants - and here's why this tactic is so appealing to attackers. By using legitimate Node.js runtime to deploy malicious payloads, threat actors can cleverly evade detection.

https://osintsights.com/threat-actors-exploit-nodejs-in-targeted-attacks?utm_source=mastodon&utm_medium=social

#Nodejs #SupplyChain #EmergingThreats #ThreatActors #MalwareOperations

Microsoft Disrupts Vanilla Tempest Campaign Using Fraudulent Code-Signing Certificates https://thecyberexpress.com/microsoft-disrupts-vanilla-tempest-campaign/ #ThreatIntelligenceNews #ThreatIntelligence #VanillaTempest #FirewallDaily #ThreatActors #ViceSociety #Ransomware #CyberNews