Telegram, AWS, and Alibaba Cloud Users Targeted in Latest Supply Chain Attack

A new supply-chain attack, which was active throughout September 2023, has been discovered in which threat actors used Typosquatting and Startjacking techniques to lure developers using Alibaba cloud services, AWS, and Telegram into downloading malicious Pypi packages. The threat actors, who had the name “kohlersbtuh15” uploaded a series of malicious packages into the open-source package […]

The post Telegram, AWS, and Alibaba Cloud Users Targeted in Latest Supply Chain Attack appeared first on Cyber Security News.

alibaba alibaba cloud attack aws cloud cloud services cyber security developers latest malicious name packages pypi pypi packages september series services supply supply chain supply chain attack techniques telegram threat threat actors threats typosquatting