cognitive cybersecurity intelligence

News and Analysis

Search

Malicious npm Package in Koishi Chatbots Silently Exfiltrate Sensitive Data in Real Time

Malicious npm Package in Koishi Chatbots Silently Exfiltrate Sensitive Data in Real Time

A supply chain cyberattack aimed at users of the Koishi chatbot has been detected, utilising a harmful npm package “koishi-plugin-pinhaofa.” The package monitors all messages processed by the chatbot, forwarding any that contain an eight-character hexadecimal string to a hardcoded QQ account. This may unknowingly disclose sensitive user data. Security experts recommend reviewing installed plugins and isolation of bots to prevent unauthorised data transmission.

Source: cybersecuritynews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts