Sonatype uncovers the PolinRider loader in 12 releases across 10 hijacked packages. See how the npm PolinRider loader uses Ethereum to fetch malware.

Related Posts:

• Trojanized Inno Setup Installers Deliver Proxyware and Compute Hijackers
• LuaJIT XLoader Infostealer Spreads via Fake Orders
• BITTER PapRAT Malware Targets South Asian Organizations

The post PolinRider Loader Hits 10 Hijacked npm Packages Using Ethereum Dead-Drop Resolver appeared first on Daily CyberSecurity.

NetamLoader, a new XAML-based .NET loader, points to a supply chain attack on a custom Windows build used by government entities in Asia.

Related Posts:

• Binance Hack Investigation Traces Historic $6.3B Breach
• Polymarket Supply Chain Attack Drains Trader Wallets
• Binance Hot Wallet Breach Prompts Multibillion-Dollar Inquiry

The post NetamLoader Hides in Windows Update Folder in Suspected Supply Chain Attack on Asian Government appeared first on Daily CyberSecurity.

Check Point reveals the Yoba malware campaign. This GitHub Yoba malware campaign uses signed OpenAI and Anthropic binaries to sideload YobaLoader.

Related Posts:

• Fake FedEx Tax Invoice PDFs Deliver Fileless Sirius Backdoor to Windows Systems
• Fake Phantom, Jupiter, and Bitget Firefox Extensions Steal Crypto Recovery Phrases
• Brazilian Magecart Group Hits Convertr Ecommerce Platform in Plausible Analytics Supply Chain Attack

The post Yoba Malware Campaign Sideloads Payloads Through Signed OpenAI and Anthropic Binaries appeared first on Daily CyberSecurity.

The Blinder Tunnel campaign used a fake Dubai Airports coding test to drop ShelbyLoader V2 on an Iraqi target. See how it works and how to defend.

Related Posts:

• ccTLD Registry Hijacks Let Attackers Mint TLS Certs
• ShinyHunters Hacker Arrest in Jordan Aids FBI Probe
• Warlock Ransomware Group Hits Water and Telecom Operators Through SharePoint Flaws

The post Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq appeared first on Daily CyberSecurity.

2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.

Related Posts:

• Moroccan Intelligence Deploys Vast Surveillance Panopticon
• DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel
• BPFDoor Backdoor and New AVERAT Implant Hide in SMTP Traffic on Telecom Edge Devices

The post New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes appeared first on Daily CyberSecurity.