Matrice Digitale

ChainScript RAT usa ClickFix e Polygon: il C2 cambia senza modificare il malware

ChainScript RAT arriva tramite ClickFix, usa Node.js e un contratto Polygon per risolvere dinamicamente il C2 e mantenere accesso remoto persistente.
Security Affairs

ChainScript: the RAT that hides its command server inside a blockchain contract

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.
Hackread

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

Pacotes maliciosos no npm burlam defesas e afetam milhões

Descubra como pacotes maliciosos no npm contornaram as novas defesas de instalação, ocultando código malicioso em tempo de ...

The story of how I tracked down a bizarre phenomenon where an Astro 5 build would hang forever at 0% CPU, only to find it was suffocating on 65,535 hard links in dist

AM, the lights in the room are dimmed, and I am facing the darkness of the terminal.Even though it should have been a routine ...