AT&T’s Alien Labs has uncovered a Go programming language-based malware named JaskaGo, with potential to infiltrate Windows and macOS systems. The cross-platform malware prompts false alerts, collects data, executes meaningless tasks when in a virtual environment, and connects to its command-and-control (C&C) server upon activation by a user. The threat, first seen in July 2023, has low detection rates, making it a significant security concern. The malware can steal sensitive information, target crypto wallet extensions, and exfiltrate files and folders.
New Weaponized PyPI Package Attacking Developers to Steal Source Code
A malicious Python package named solana-token was discovered, designed to steal source code and sensitive data from Solana developers. Masquerading as a legitimate utility, it
