Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Malicious npm Packages Deploy AI-Powered RedC2 Linux Implant to Steal Credentials and Pivot Networks

Cybersecurity NewsAugust 24, 20264 min read

Malicious npm packages are being used to place a Linux backdoor inside calendar and streak-calculation tools. The packages deliver legitimate date functions, making the malicious code easy to miss. The danger begins when an affected module is imported. The loader makes a bundled Linux program executable and starts it in the background, without an install […] The post Malicious npm Packages Deploy AI-Powered RedC2 Linux Implant to Steal Credentials and Pivot Networks appeared first on Cyber Security News.

Malicious npm packages are being used to place a Linux backdoor inside calendar and streak-calculation tools. The packages deliver legitimate date functions, making the malicious code easy to miss. The danger begins when an affected module is imported. The loader makes a bundled Linux program executable and starts it in the background, without an install script or suspicious function call. TrendAI researchers identified the campaign as a software supply chain attack that delivers RedShell,…

Excerpt shown under the publisher's RSS terms · 74 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article