Chinese-speaking organizations in Hong Kong, Taiwan, and mainland China have been targeted by a sophisticated cyberattack delivering the ValleyRAT malware via a multi-stage loader called PNGPlug, according to Intezer Labs. The attack utilizes phishing webpages to entice victims into downloading a malicious Microsoft Installer package masquerading as legitimate software.

Malicious Python package poses new supply chain threat – Techzine Global
Malicious Python package poses new supply chain threat Techzine Global


