Supply chain attack targeted GitHub community of Top.gg Discord server
The malware stole data from browsers, Discord , crypto wallets, and files that matched certain keywords. As of now, it's not clear where this data was sent.
The malicious Python packages were uploaded in November 2022, but the attack didn't start in earnest until last February when the doppelganger domain was registered. The official PyPI domain is pythonhosted.org, though the similar pypihosted domain was open and the attacker registered it. The attacker made sure that real URL and the fake URL strings looked nearly identical. In fact, the only difference between the two was the domain name, pythonhosted versus pypihosted.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Explorer rescued from Scots cave made famous by Monty PythonThey were rescued from the “Cave of Caerbannog” by the Tayside Mountain Rescue Team.
Read more »
Deforestation rules could hit supply chain’s ‘weakest link’, coffee farmers warnSmall-scale producers in Colombia are calling for their voices to be heard amid Westminster legislation which may affect their trade.
Read more »
Deforestation rules could hit supply chain’s ‘weakest link’, coffee farmers warnSmall-scale producers in Colombia are calling for their voices to be heard amid Westminster legislation which may affect their trade.
Read more »
‘New climate reality’ stretches global freshwater supplyPopulation growth and industrialisation are compounding the problem, but there is no shortage of solutions
Read more »
ING Sees Oil Prices Rising Further on Supply RiskOil markets will continue to tighten in the second and third quarters amid growing supply risks including the rollover of voluntary supply cuts from OPEC into Q2 2024
Read more »