Do Son
At a glance Malware family Unnamed cross-platform RAT (final payload “aone-cli”) Threat actor Unattributed; suspected Chinese-speaking actor...
Socket
At a Glance Malware family Braintree.Net typosquat, a multi-stage .NET implant with a companion harvester (DependencyInjector.Core) Threat...
Actor / group Unnamed actor tracked as “Operation Muck and Load”; overlaps with the ischhfd83 cluster Activity...
At a Glance Actor / group Suspected North Korean actors in the Contagious Interview / Famous Chollima...
A sweeping Mastra supply chain attack has hit the JavaScript ecosystem hard. Security firm Socket detected the...
Cybersecurity researchers recently uncovered a massive ad-fraud campaign hiding on the official web store. Socket’s Threat Research...
Overview of the Global Fraud Threat Cybersecurity researchers have just detected a dangerous software campaign targeting Python...
Security researchers are sounding the alarm on a highly resourceful new campaign dubbed “GemStuffer.” Uncovered by Socket’s...
Security researchers at Socket have uncovered a coordinated software supply chain campaign orchestrated through the GitHub account...
Security researchers at Socket have identified a major expansion of the “Mini Shai-Hulud” supply chain campaign, which...
A sophisticated cyber-espionage operation, dubbed the GlassWorm campaign, is rapidly expanding its footprint within the open-source community....
Researchers at Socket have identified a massive new cluster of malicious packages linked to North Korea’s notorious...
Cybersecurity researchers at Socket have uncovered a sophisticated security breach affecting the popular Aqua Trivy VS Code...
Cybersecurity researchers at Socket have uncovered a sophisticated multi-stage malware operation, dubbed “StegaBin,” specifically designed to harvest...
A new investigation by The Socket Threat Research Team has uncovered a sophisticated spear-phishing operation that has...
A new threat is targeting the Solana ecosystem, preying on traders looking for speed and convenience on...
Socket has detected a large-scale supply chain attack in progress targeting the npm ecosystem. The account of...
Socket’s Threat Research Team has uncovered a coordinated supply chain attack targeting the Ethereum ecosystem through four...
A new chapter in the ongoing Contagious Interview campaign has emerged, as the Socket Threat Research Team...
A new report by the Socket Threat Research Team has uncovered a sprawling network of malicious Firefox...
Socket’s Threat Research Team has uncovered a malicious Python package named psslib designed to abruptly shut down...
In a recent revelation, Socket’s Threat Research Team has uncovered a stealthy npm supply chain attack leveraging...