ChainDrop npm worm infected 400+ packages, stealing cloud keys and CI secrets via blockchain C2. Unit 42 details the full attack chain and fixes. Related Posts: Fake Zoom Installer Drops Overlord RAT on macOS macOS ClickFix Campaign Hides Its Lure Behind a Fingerprinting Gate Fake AI Tools Malware Targets Developers Through GitHub The post ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 appeared first on Daily CyberSecurity.

XCSSET v40 malware infects macOS developers through poisoned Xcode projects on GitHub, then hides in memory. Unit 42 found 17 modules and Chrome hijacking. Related Posts: QuickFox Supply Chain Attack Delivers FDMTP Implant to Windows Users Xeno Roblox Malware Spreads a Java Stealer Through Fake Cheats HostDzire Ransomware Attack Causes Complete Data Loss The post XCSSET v40 Malware Targets macOS Developers Through Xcode appeared first on Daily CyberSecurity.