North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks

ReversingLabs researchers linked the VMConnect campaign to the North Korea-linked APT group Labyrinth Chollima. ReversingLabs researchers believe that the North Korea-linked APT group Labyrinth Chollima is behind the VMConnect campaign. Threat actors uploaded a series of malicious packages to the PyPI (Python Package Index) repository, including a rogue package posing as the VMware vSphere connector […]

The post North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks appeared first on Security Affairs.

apt attacks breaking news campaign hacking intelligence it information security korea labyrinth chollima malicious malicious packages malware north north korea package packages pierluigi paganini pypi python python package python package index repository researchers reversinglabs rogue series supply supply chain supply chain attacks threat threat actors vmconnect