Malicious Python Package Hides Sliver C2 Framework Within PNG File

An attacker published a malicious package on PyPI named “requests-darwin-lite,” masquerading as a variant of the popular “requests” library, which contained a hidden Golang binary within an unusually large version of the legitimate “requests” logo image.  The binary’s execution was conditional, triggering only on specific system identifiers, suggesting a targeted attack or a test phase […]

The post Malicious Python Package Hides Sliver C2 Framework Within PNG File appeared first on Cyber Security News.

attacker binary c2 framework cyber security file framework golang hidden image large library logo macos malicious malicious-code malware masquerading package png popular pypi python python package requests sliver steganography system version