#unc1069 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #unc1069, aggregated by home.social.
-
UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm
Il 31 marzo 2026, UNC1069 — il gruppo APT nordcoreano noto anche come Sapphire Sleet — ha compromesso l'account di un maintainer di Axios per distribuire il backdoor cross-platform WAVESHAPER.V2 tramite una falsa dipendenza npm. Tre ore di esposizione, 19 organizzazioni colpite e l'intera community JavaScript con le mani nei capelli. -
UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm
Il 31 marzo 2026, UNC1069 — il gruppo APT nordcoreano noto anche come Sapphire Sleet — ha compromesso l'account di un maintainer di Axios per distribuire il backdoor cross-platform WAVESHAPER.V2 tramite una falsa dipendenza npm. Tre ore di esposizione, 19 organizzazioni colpite e l'intera community JavaScript con le mani nei capelli. -
UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm
Il 31 marzo 2026, UNC1069 — il gruppo APT nordcoreano noto anche come Sapphire Sleet — ha compromesso l'account di un maintainer di Axios per distribuire il backdoor cross-platform WAVESHAPER.V2 tramite una falsa dipendenza npm. Tre ore di esposizione, 19 organizzazioni colpite e l'intera community JavaScript con le mani nei capelli. -
UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm
Il 31 marzo 2026, UNC1069 — il gruppo APT nordcoreano noto anche come Sapphire Sleet — ha compromesso l'account di un maintainer di Axios per distribuire il backdoor cross-platform WAVESHAPER.V2 tramite una falsa dipendenza npm. Tre ore di esposizione, 19 organizzazioni colpite e l'intera community JavaScript con le mani nei capelli. -
UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm
Il 31 marzo 2026, UNC1069 — il gruppo APT nordcoreano noto anche come Sapphire Sleet — ha compromesso l'account di un maintainer di Axios per distribuire il backdoor cross-platform WAVESHAPER.V2 tramite una falsa dipendenza npm. Tre ore di esposizione, 19 organizzazioni colpite e l'intera community JavaScript con le mani nei capelli. -
Fake-Teams-Update: So haben Angreifer den #axios-Maintainer ausgetrickst | Security https://www.heise.de/news/Fake-Teams-Update-So-haben-Angreifer-den-axios-Maintainer-ausgetrickst-11246273.html #SocialEngineering #hacking #UNC1069 #Malware
-
Watch out as North Korean group #UNC1069 targets Node.js maintainers using fake LinkedIn and Slack profiles to spread malware and compromise open source packages.
Read: https://hackread.com/unc1069-node-js-maintainer-fake-linkedin-slack-profile/
-
🚨 Over the past two weeks, two massive, overlapping campaigns—TeamPCP’s "blitzkrieg" on security tools like Trivy and Checkmarx, and UNC1069's devastating RAT deployment via the Axios library—have compromised thousands of CI/CD pipelines.
Read the full deep-dive and get the immediate mitigation steps here: https://www.security.land/2026-supply-chain-attacks-teampcp-trivy-axios/
#SecurityLand #BreachBreakdown #SupplyChainAttack #NPM #Cybersecurity #Axios #Trivy #TeamPCP #UNC1069
-
🚨 Over the past two weeks, two massive, overlapping campaigns—TeamPCP’s "blitzkrieg" on security tools like Trivy and Checkmarx, and UNC1069's devastating RAT deployment via the Axios library—have compromised thousands of CI/CD pipelines.
Read the full deep-dive and get the immediate mitigation steps here: https://www.security.land/2026-supply-chain-attacks-teampcp-trivy-axios/
#SecurityLand #BreachBreakdown #SupplyChainAttack #NPM #Cybersecurity #Axios #Trivy #TeamPCP #UNC1069
-
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#AxiosProject #UNC1069 #WAVESHAPER
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package -
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#AxiosProject #UNC1069 #WAVESHAPER
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package -
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#AxiosProject #UNC1069 #WAVESHAPER
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package -
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#AxiosProject #UNC1069 #WAVESHAPER
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package -
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#AxiosProject #UNC1069 #WAVESHAPER
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package -
Nordkoreanische Hacker professionalisieren KI-Angriffe – Finanzbranche im Fadenkreuz! Laut Sicherheitsforschern von Mandiant setzen nordkoreanische Hacker der Gruppe UNC1069 inzwischen hochentwickelte KI‑Tools, Deepfakes und Social Engineering ein, um gezielt Unternehmen der Finanz- und Kryptobranche anzugreifen. #CyberSecurity #AIThreats #UNC1069 #FinancialServices #Krypto #Deepfake #Cybercrime #Nordkorea #Hackerangriff
-
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069 #WAVESHAPER #HYPERCALL #HIDDENCALL #DEEPBREATH #CHROMEPUSH #SILENCELIFT
https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering -
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069 #WAVESHAPER #HYPERCALL #HIDDENCALL #DEEPBREATH #CHROMEPUSH #SILENCELIFT
https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering -
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069 #WAVESHAPER #HYPERCALL #HIDDENCALL #DEEPBREATH #CHROMEPUSH #SILENCELIFT
https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering -
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069 #WAVESHAPER #HYPERCALL #HIDDENCALL #DEEPBREATH #CHROMEPUSH #SILENCELIFT
https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering -
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069 #WAVESHAPER #HYPERCALL #HIDDENCALL #DEEPBREATH #CHROMEPUSH #SILENCELIFT
https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
#PROMPTFLUX #PROMPTSTEAL #TEMP_Zagros #UNC1069 #UNC4899 #APT42
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
#PROMPTFLUX #PROMPTSTEAL #TEMP_Zagros #UNC1069 #UNC4899 #APT42
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
#PROMPTFLUX #PROMPTSTEAL #TEMP_Zagros #UNC1069 #UNC4899 #APT42
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
#PROMPTFLUX #PROMPTSTEAL #TEMP_Zagros #UNC1069 #UNC4899 #APT42
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools -
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
#PROMPTFLUX #PROMPTSTEAL #TEMP_Zagros #UNC1069 #UNC4899 #APT42
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools