Tag: open-source malware

3 Attack Reports | 0 Vulnerabilities

Attack reports

New malicious npm package 'ambar-src' targets developers with open source malware

A malicious npm package named "ambar-src" reached 50,000 downloads in days before being removed from the registry. It uses a preinstall script to execute malicious code during installation, targeting Windows, Linux, and macOS systems. The package employs detection evasion techniques and deploys pow…
linux
windows
supply chain
macos
npm
open-source malware
detection evasion
2026-02-27
apfell
mythicagents
preinstall script
reverse_ssh
yandex cloud
Published: February 27, 2026
Downloadable IOCs: 6

Inside a VenomRAT Malware Campaign

A malicious campaign utilizing VenomRAT, a Remote Access Trojan, is analyzed. The attackers use a fake Bitdefender download website to spread malware, including VenomRAT, StormKitty, and SilentTrinity. These tools work together to provide initial access, steal credentials, and maintain long-term hi…
phishing
credential theft
venomrat
open-source malware
command and control
remote access trojan
stormkitty
silenttrinity
2025-05-29
Published: May 29, 2025
Downloadable IOCs: 35

Security Brief: Royal Mail Lures Deliver Open Source Prince Ransomware

A campaign impersonating Royal Mail was identified delivering Prince ransomware, an open-source variant available on GitHub. The low-volume attack targeted UK and US organizations in mid-September, often originating from contact forms on target websites. The ransomware lacks decryption mechanisms a…
obfuscation
phishing
github
2024-10-02
prince ransomware
destructive attack
royal mail
open-source malware
prince
contact forms
Published: October 2, 2024
Downloadable IOCs: 3
Click here to see more Attack Reports