Python

New Python-Based RAT Disguised as Minecraft App Steals Sensitive User Data

Threat researchers at Netskope have uncovered a sophisticated new Remote Access Trojan (RAT) written in Python that masquerades as "Nursultan…

1 year ago

NightMARE: A Python Library for Advanced Malware Analysis and Threat Intelligence Extraction

Elastic Security Labs has officially released nightMARE version 0.16, a comprehensive Python library designed to streamline malware analysis and reverse…

1 year ago

Threat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby Packages

Threat actors are increasingly abusing Discord webhooks as covert command-and-control (C2) channels inside open-source packages, enabling stealthy exfiltration of secrets,…

1 year ago

Polymorphic Python Malware That Mutates Every Time It Runs

A newly spotted Python remote access trojan (RAT) on VirusTotal employs advanced polymorphic and self-modifying techniques, allowing it to alter…

1 year ago

Python-Based “XillenStealer” Campaign Targets Windows Users’ Sensitive Data

A sophisticated Python-based information stealer named XillenStealer has emerged as a significant threat to Windows users, designed to harvest sensitive…

1 year ago

APT37 Deploys New Rust and Python Malware Targeting Windows Systems

The North Korean-aligned threat group APT37, also known as ScarCruft, Ruby Sleet, and Velvet Chollima, has evolved its cyber warfare…

1 year ago

Stealthy Python Malware Uses Discord to Steal Windows Data

Inf0s3c Stealer, a stealthy Python-based grabber built to harvest system information and user data from Windows hosts. Packed as a…

1 year ago

Hackers Abuse Python eval/exec Calls to Run Malicious Code

Threat actors are increasingly abusing native evaluation and execution functions to conceal and execute malicious payloads within innocent-looking packages on…

1 year ago

Weaponized Python Package “termncolor” Uses Windows Run Key for Persistence

Cybersecurity experts discovered a complex supply chain attack that originated from the Python Package Index (PyPI) in a recent disclosure…

1 year ago

Typosquatted PyPI Packages Used by Threat Actors to Steal Cryptocurrency from Bittensor Wallets

GitLab's Vulnerability Research team has uncovered a highly sophisticated cryptocurrency theft campaign exploiting typosquatted Python packages on the Python Package…

1 year ago