Phylum has found a malicious package on the .NET Framework package manager, NuGet, that delivers the SeroXen remote access trojan (RAT). The package has been downloaded over 100,000 times and the suspect profile has published six other packages with over 2.1 million downloads, some of which are masquerading as libraries for crypto services. The malware initiates via a script, while the PowerShell script retrieves a heavily-obfuscated Windows Batch script, eventually deploying the SeroXen RAT.
WordPress users targeted by devious new credit card skimmer malware
E-commerce websites running on WordPress are being targeted by cybercriminals who are inserting malicious JavaScript code to steal payment information, Sucuri cyber security researchers have