Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper
Thursday, 15 May 2025
Add Comment
Cybersecurity researchers have discovered a malicious package named "os-info-checker-es6" that disguises itself as an operating system information utility to stealthily drop a next-stage payload onto compromised systems. "This campaign employs clever Unicode-based steganography to hide its initial malicious code and utilizes a Google Calendar event short link as a dynamic dropper for its final
from The Hacker News https://ift.tt/vxlEb12
Genrerating Link.... 15 seconds.
Your Link is Ready.
0 Response to "Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper"
Post a Comment