Microsoft Secure

WhatsApp malware campaign delivers VBS payloads and MSI backdoors

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack leverages renamed Windows tools and cloud-hosted payloads to install MSI backdoors and maintain persistent access to compromised systems.
The post WhatsApp malware campaign delivers VBS payloads and MSI backdoors appeared first on Microsoft Security Blog. READ MORE HERE…

Read More
The Register

Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios One of npm’s most widely used HTTP client libraries briefly became a malware delivery vehicle after attackers hijacked a maintainer’s account and slipped a remote-access trojan (RAT) into two seemingly legitimate axios releases, in what’s being described as “one of the most impactful npm supply chain attacks on record.”… READ MORE HERE…

Read More