North Korea-linked threat actors are utilizing a new malware dubbed OtterCookie in the Contagious Interview campaign, which lures software developers with fake job offers. This financially-driven campaign has been active since December 2022 and uses additional malware such as BeaverTail and InvisibleFerret. The initial attack emerged via malicious Node.js projects or npm packages from GitHub or Bitbucket. The OtterCookie primarily targets cryptocurrency wallet keys.
Healthcare organizations in the US may soon get a cybersecurity overhaul
The US Department of Health and Human Services proposes new cybersecurity requirements for healthcare organizations. The proposed guidelines include multifactor authentication, data encryption, routine vulnerability