#typosquatted — Public Fediverse posts

Iztok Smolic (Agiledrop) explains how his team almost got #phished.

Turns out a "potential client" with a #TypoSquatted email address sent a demo #git repository that had a post-checkout hook ready to run code with full permissions.

Another attack vector I wasn't aware of 😬

https://www.linkedin.com/posts/iztok-agiledrop_we-almost-got-phished-this-week-not-by-share-7464980887990935552-tmru

Iztok Smolic (Agiledrop) explains how his team almost got #phished.

Turns out a "potential client" with a #TypoSquatted email address sent a demo #git repository that had a post-checkout hook ready to run code with full permissions.

Another attack vector I wasn't aware of 😬

https://www.linkedin.com/posts/iztok-agiledrop_we-almost-got-phished-this-week-not-by-share-7464980887990935552-tmru

Malicious Typosquatted npm Packages Deliver Cross-Platform Credential Stealer, Researchers Warn https://thecyberexpress.com/typosquatted-npm-packages-credential-stealer/ #TheCyberExpressNews #TheCyberExpress #FirewallDaily #typosquatted #CyberNews #CAPTCHA #Windows #npm

Malicious Typosquatted npm Packages Deliver Cross-Platform Credential Stealer, Researchers Warn https://thecyberexpress.com/typosquatted-npm-packages-credential-stealer/ #TheCyberExpressNews #TheCyberExpress #FirewallDaily #typosquatted #CyberNews #CAPTCHA #Windows #npm