A Python-based malware campaign, carried out by the PyPI package ‘imad213’, is targeting Instagram users seeking follower growth. The malware poses as a follower-building tool to steal login credentials. The sophisticated attack uses professional branding and resembles legitimate software. The stolen data is then shared with ten Turkish bot services. The campaign potentially results in policy violations and subsequent account suspensions or terminations.
The Chrome Extension Backdoor: How 'Productivity Tools' Became Enterprise Attack Vectors – Security Boulevard
The Chrome Extension Backdoor: How ‘Productivity Tools’ Became Enterprise Attack Vectors Security Boulevard

