Do Son A distributed npm supply chain attack dropped a cross-platform RAT on Alibaba developers. Socket found malicious npm packages hiding loader code.
DingTalk
Learn about CVE-2025-26633, a zero-day vulnerability being exploited by sophisticated attackers utilizing MSC EvilTwin methods.
Learn about the emergence of HZ Rat backdoor on macOS, targeting DingTalk and WeChat users. Stay vigilant against this new threat.