Cybersecurity analysts have discovered an updated version of the NodeStealer malware, which is now capable of extracting more data from victims’ Facebook Ads Manager accounts and harvesting credit card details stored in browsers. The Python-based malware is believed to be developed by Vietnamese threat actors focusing on hijacking Facebook advertising and business accounts to enable other malicious activities. The malware avoids infecting machines located in Vietnam, presumably to evade local law enforcement actions.
Malicious PyPi Package Mimic ChatGPT & Claude Steals Developers Data
Kaspersky’s research team discovered a supply chain attack targeting the Python Package Index (PyPI). The attack involved malicious packages posing as AI chatbot tools distributing