Attackers have begun using an inline tasks feature of MSBuild, a code building tool, to execute malicious codes on NuGet Gallery, a repository for .NET packages. This is the first known instance of malware on NuGet exploiting this feature. The malware was part of a months-long typosquatting campaign, with hundreds of malicious packages being uploaded to the repository since August. The tactics used by the attackers evolved throughout the campaign.
Group-IB’s Threat Intelligence and Defence Centre Equip Undergraduates with Sophisticated Cybersecurity Technologies to Boost Threat Analysis and Enhance Cyber Resilience for Campus Start-ups
Hey there from the heart of the San Francisco Bay Area! It’s an absolute pleasure to have you back again for our chat on some
