Phylum has found a malicious package on the .NET Framework package manager, NuGet, that delivers the SeroXen remote access trojan (RAT). The package has been downloaded over 100,000 times and the suspect profile has published six other packages with over 2.1 million downloads, some of which are masquerading as libraries for crypto services. The malware initiates via a script, while the PowerShell script retrieves a heavily-obfuscated Windows Batch script, eventually deploying the SeroXen RAT.
Agentic AI could be a blessing and a curse for cybersecurity
Malwarebytes research shows that as agentic AI systems advance, they could become a significant tool for cybercriminals. This technology has the potential to be a