Threat Actor Continues to Plague the Open-Source Ecosystem with Sophisticated Info-Stealing Malware

In May, we sounded the alarm about PYTA31, an advanced persistent threat actor distributing the “WhiteSnake” malware. Since then, we’ve been rigorously monitoring this group, which has been active from April through mid-August, distributing malicious PyPI packages laced with “WhiteSnake Malware.” 

WhiteSnake Malware, also known as the “WhiteSnake Stealer”, first appeared on hacking forums in early 2022. Its main objective: Stealing data from various browsers and applications. 

Key Points

• Threat actor PYTA31 has continuously distributed “WhiteSnake” malware through malicious …

actor advanced advanced persistent threat alarm april august ecosystem info info-stealing malware malicious malware may monitoring packages persistent persistent threat pypi pypi packages stealing threat threat actor