SC Media

New Exvicy malware-as-a-service framework copies rival’s code

Exvicy operates as a ClickFix framework, distributing malware through compromised WordPress websites, according to Sekoia's Threat Detection & Research team.
The Hacker News

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.
Infosecurity Magazine

New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code

A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic.
Cyber Security News

Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code

Malicious npm package indexed-btree impersonated sorted-btree, using nearly 2M weekly downloads to steal data and deliver payloads.
Security Affairs

ChainScript: the RAT that hides its command server inside a blockchain contract

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.
InfoWorld

New npm malware finds a way around install script defenses

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
cyberpress

npm Supply Chain Attack Hides Malware Inside Normal Package Code to Evade Detection

A new npm supply chain campaign is hiding malware inside ordinary JavaScript package code instead of using the usual ...
Tech Times

Single Extension Hijacks AI Agents in Five Browsers Without Any User Clicks

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Researchers escape OpenAI Codex sandbox to run commands on host

Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.
techtimes

Malicious JavaScript Evaded VirusTotal in Seven of Eight E-Commerce Storefront Attacks

Worker move goods for despatch in a redistribution centre of US online retail giant Amazon in Horn-Bad Meinberg, western Germany, on December 9, 2024. INA FASSBENDER/AFP via Getty Images Cloudflare's ...