spread

Fake Arch Linux packages spread malware with root privileges

by
Fake Arch Linux packages spread malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that imitated two popular utility tools, yay and paru. AUR is a community-maintained, widely used package index for Arch Linux and derived distributions that hosts package build scripts (PKGBUILDs) for third-party and proprietary tools, beta versions or older package versions that are no … Read more

Russian state hackers are using the new RedFlick technology to spread malware

by
Russian state hackers are using the new RedFlick technology to spread malware

Russian state actor Star Blizzard is using a new malware installation tactic called “RedFlick” to deploy its signature CosmicPulse backdoor. While the tactic is not a new cybersecurity technique, it is a new delivery approach for the threat actor, allowing them to further automate attacks and reduce interaction with victims. Microsoft researchers say that in … Read more