Users on GitHub are being infected with infostealer malware from a misleading proof-of-concept (PoC) exploit for CVE-2024-49113, also known as LDAPNightmare. Thought to be from SafeBreach Labs’ legitimate PoC, the malicious repository uses a PowerShell script to exfiltrate sensitive data. Cybersecurity firm Trend Micro urges users to verify repositories’ authenticity and rely on trusted cybersecurity companies and researchers.
North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to
