This Week in Malware – Fileless Linux Cryptominer, 100 Packages

This week in malware we discovered and analyzed nearly 100 packages flagged as malicious, suspicious, or dependency confusion attacks.

Notably, we uncovered a PyPI package that drops fileless Linux malware directly in memory to covertly run a cryptominer. Furthermore, our investigation revealed the threat actor published this malicious package under the stolen identity of a software engineer from a United States National Laboratory.

The post This Week in Malware – Fileless Linux Cryptominer, 100 Packages appeared first on Security Boulevard …

cryptominer devzone fileless linux malware malware prevention pypi this week in malware vulnerabilities