Solana

Monero

Read

<div class="cryptonews">
 <p class="is-style-lead">A set of <a rel="noopener noreferrer nofollow" title="malicious" href="https://thebittimes.com/tag/malicious.html">malicious</a> <a rel="noopener noreferrer nofollow" title="packages" href="https://thebittimes.com/tag/packages.html">packages</a> impersonating Kraken, Solana and Monero has <a rel="noopener noreferrer nofollow" title="flooded" href="https://thebittimes.com/tag/flooded.html">flooded</a> NuGet’s server as hackers launch new scams.</p>
 <p>NuGet, a <a rel="noopener noreferrer nofollow" title="manager" href="https://thebittimes.com/tag/manager.html">manager</a> used for packaging and distributing software written with the .NET framework, appears to be a target for bad actors seeking to exploit vulnerabilities, impersonating crypto-related <a rel="noopener noreferrer nofollow" title="packages" href="https://thebittimes.com/tag/packages.html">packages</a>.</p>
 <p>As first reported by Phylum researchers, six <a rel="noopener noreferrer nofollow" title="malicious" href="https://thebittimes.com/tag/malicious.html">malicious</a> <a rel="noopener noreferrer nofollow" title="packages" href="https://thebittimes.com/tag/packages.html">packages</a> — downloaded by a user named “Disti” — are pretending to be libraries and wrappers for Kraken, Solana, KuCoin and Monero. The bad actor reportedly also tried to bolster credibility by faking the download figures.</p>
 <figure class="wp-block-image size-full"><picture decoding="async" class="wp-image-14203865">
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2023/10/13/564659ee27eff157e5775caf8710d9e5.webp.webp">
   <img decoding="async" width="1000" height="987" src="https://cdn.thebittimes.com/images/2023/10/13/564659ee27eff157e5775caf8710d9e5.webp" alt="NuGet manager flooded with malicious Kraken, Solana packages - 1"> 
  </picture>
  <figcaption class="wp-element-caption">
   NuGet’s repository of Disti | Source: Phylum
  </figcaption>
 </figure>
 <p>Once the malware is installed on a victim’s computer, it executes .cmd and .bat files with the help of two PowerShell scripts. Eventually, the scripts download an external file, trying to stay unnoticed by not producing visible output or errors.</p>
 <p>After a long series of manipulations, the script downloads SeroXen RAT. This stealthy remote access trojan gained popularity when it was used alongside cheats for video games such as Call of Duty: Warzone and Fortnite. The trojan is well-known among cybercriminals as it gives them full access to a victim’s computer with low detection. As noted by BleepingComputer, the malware is still available on NuGet’s server.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Group-IB warns about malware targeting banking apps and crypto wallets in Vietnam
 </div>
 <p>As crypto.news earlier reported, a new iteration of the Ducktail phishing campaign also spreads PHP malware that can access and steal users’ Facebook accounts, browsing data, and even crypto wallets. The attackers are said to employ social engineering techniques and seek targets through LinkedIn, a professional networking website.</p>
 <p>The malware is being distributed as an archive, including images, videos, and documents. Once the file has been downloaded and opened, browser cookies are read and transmitted to the hacker’s server.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Blackberry identifies malware that affects crypto community
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/nuget-manager-flooded-with-malicious-kraken-solana-packages-tbt66222.html">https://thebittimes.com/nuget-manager-flooded-with-malicious-kraken-solana-packages-tbt66222.html</a></p>

NuGet manager flooded with malicious Kraken, Solana packages

TheBitTimes

Other articles published on Oct 13, 2023

2023’s Top Crypto Choices for Retail Investors: Polygon, VC Spectra, and Filecoin

New IRS Rules May Shudder Crypto Industries, Says Coinbase

Secret recording of all-hands Alameda meeting played in court leaks online

Identity of FTX hacker remains a mystery as stolen assets shift again

Polkadot (DOT) Crashing to $1.5? Top Analyst ‘Wouldn’t Be Surprised’ After 93% Decline – Here’s H...

Crypto Gaming Sector Defies Bear Market with $600M in Q3 Funding

Join our free newsletter for daily crypto updates!