Three malicious packages named “solanacore,” “solana-login,” and “walletcore-gen” have been found on the npmjs.com registry targeting Solana crypto developers with Windows malware. Unlike typical crypto-stealer packages, they plainly show their intent to collect keylogging and other sensitive data, rather than attempting to hide their true nature. The packages use Slack web hooks and ImgBB APIs to transfer the collected data to external actors. The packages have been downloaded over 1,900 times.
ELFDICOM: PoC Malware Polyglot Exploiting Linux-Based Medical Devices
A serious vulnerability in DICOM, a standard medical imaging file protocol, allows attackers to embed malicious codes in legitimate medical files used in healthcare. Despite
