Phishing for leeches. [Research Saturday]

Ashlee Benge from ReversingLabs discussing their research titled "Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks." Researchers recently discovered over a dozen malicious packages published to the npm open source repository. These packages are targeting Microsoft 365 users and appear to target application end users while also supporting email phishing campaigns.
Research supports that the malicious campaign encompassed more than a dozen files designed to steal sensitive user credentials. The research states "This most recent campaign caught …

application attacks campaigns email email phishing end fuel malicious malicious npm malicious packages microsoft microsoft 365 npm open source packages phishing phishing attacks repository research researchers reversinglabs supply supply chain target targeting