Free Download Manager backdoored – a possible supply chain attack on Linux (securelist.com)

Screenshot of securelist.com: Free Download Manager backdoored – a possible supply chain attack on Linux

First screen, captured 3 years ago.

Looks similar

Screenshot of securelist.com: Notepad++ supply chain attack breakdown

Notepad++ supply chain attack breakdown (securelist.com)

321 points by natebc 8 months ago | 145 comments

Kaspersky Securelist research article analyzing the Notepad++ supply chain attack, its unnoticed execution chains, and new indicators of compromise.

notepad-plus-plus supply-chain-attack kaspersky malware

Screenshot of securelist.com: Phishers are hijacking legitimate cloud infrastructure

Phishers are hijacking legitimate cloud infrastructure (securelist.com)

46 points by lschueller 2 months ago | 13 comments

Screenshot of fenrisk.com: Supply Chain Attacks on Linux Distributions

Supply Chain Attacks on Linux Distributions (fenrisk.com)

7 points by ramimac 1 year ago | 0 comments

Screenshot of socket.dev: Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (socket.dev)

1182 points by jamesberthoty 1 year ago | 965 comments

StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.

supply-chain-attack npm shai-hulud malware

Screenshot of securelist.com: Operation Triangulation: iOS devices targeted with previously unknown malware

Operation Triangulation: iOS devices targeted with previously unknown malware (securelist.com)

114 points by fortran77 3 years ago | 23 comments

Screenshot of flatt.tech: Compromising OpenWrt Supply Chain

Compromising OpenWrt Supply Chain (flatt.tech)

546 points by udev4096 1 year ago | 91 comments

Flatt Security research post by RyotaK describing a supply chain attack against OpenWrt's firmware build service involving a SHA256 hash collision.

openwrt supply-chain-attack sha256-collision firmware

Looks similar

Notepad++ supply chain attack breakdown(securelist.com)

Phishers are hijacking legitimate cloud infrastructure(securelist.com)

Supply Chain Attacks on Linux Distributions(fenrisk.com)

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised(socket.dev)

Operation Triangulation: iOS devices targeted with previously unknown malware(securelist.com)

Compromising OpenWrt Supply Chain(flatt.tech)