Tag: javascript obfuscation

2 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious pull request infects VS Code extension

A VS Code extension for Ethereum smart contract development, ETHcode, was compromised through a GitHub pull request. The attacker, using a newly created account, submitted a PR that introduced a malicious dependency and code to execute it. The compromise was subtle, involving only two lines of code…
github
vs code
supply chain attack
ethereum
javascript obfuscation
2025-07-09
ethcode
keythereum-utils
pull request
Published: July 9, 2025
Downloadable IOCs: 0

Remcos RAT Malware Disguised as Major Carrier's Waybill

A sophisticated malware campaign has been discovered, utilizing the Remcos RAT disguised as a shipping company waybill. The attack begins with an email containing an HTML script, which when executed, downloads a JavaScript file. This file creates and downloads several components, including a config…
phishing
autoit
remcos rat
persistence techniques
shellcode injection
2025-04-01
javascript obfuscation
email attack
waybill disguise
Published: April 1, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports