Attacking The Supply Chain: Developer

In this proof of concept, we look into one of several attack vectors that can be abused to attack the supply chain: targeting the developer. With a focus on the local integrated developer environment (IDE), this proof considers the execution of malicious build scripts via injecting commands when the project or build is incorrectly “trusted”.

attack attack vectors build concept developer environment focus ide local malicious project reports scripts supply supply chain targeting trend micro research : articles trend micro research : cloud trend micro research : cyber threats trend micro research : endpoints trend micro research : mobile