Kaspersky, Axios npm Saldırısını Kuzey Koreli BlueNoroff’a Bağladı

25 kaynak
endorlabs.com
  • Kaspersky GReAT, Axios npm tedarik zinciri saldırısının arkasında kripto firmalarını hedef almasıyla bilinen Kuzey Koreli BlueNoroff grubunun bulunduğunu resmen açıkladı.
  • Mart 2026'daki saldırı, ele geçirilen bir geliştirici hesabı üzerinden iki Axios sürümüne platformlar arası bir RAT enjekte ederek kütüphanenin haftalık 100 milyondan fazla kullanıcısını etkiledi.
  • Ayrı bir açıklamada Kaspersky, SilverFox APT grubunun Asya-Pasifik bölgesindeki kuruluşları hedef alarak sahte Claude yapay zeka uygulamaları üzerinden zararlı yazılım yaydığını bildirdi.
Kaynaklar (25)
  1. 1 Kaspersky GReAT Uncovers Bluenoroff Link in Major Supply Chain ... cxotoday.com
  2. 2 Kaspersky Links Axios Supply Chain Attack to BlueNoroff - IT Voice www.itvoice.in
  3. 3 Axios Supply Chain Attack: Analysis & Fix | Orca Security orca.security
  4. 4 Supply Chain Compromise of axios npm Package - Huntress www.huntress.com
  5. 5 SilverFox hackers use fake Claude apps to target companies in Asia economictimes.com
  6. 6 Warning of malware from fake Claude AI application news.laodong.vn
  7. 7 Threat Brief: Widespread Impact of the Axios Supply Chain Attack unit42.paloaltonetworks.com
  8. 8 Axios npm Supply Chain Attack: Cross-Platform RAT Delivery via ... www.picussecurity.com
  9. 9 Axios NPM & LiteLLM PyPI Supply Chain Attacks 2026 - Zscaler, Inc. www.zscaler.com
  10. 10 Axios npm Supply Chain Compromise (2026-03-31) — Full RE + ... gist.github.com
  11. 11 Kaspersky identified a new SilverFox campaign targeting Indian and ... www.kaspersky.com
  12. 12 The Axios npm supply chain attack: What every developer needs to ... workos.com
  13. 13 Fake Claude Code Installer Drops Infostealer - Cyderes www.cyderes.com
  14. 14 Axios npm Packages Compromised - eSentire www.esentire.com
  15. 15 Fake Claude Site Delivers PlugX Malware to Users - Ampcus Cyber www.ampcuscyber.com
  16. 16 the WORST hack of 2026 - YouTube www.youtube.com
  17. 17 InstallFix and Claude Code: How Fake Install Pages Lead to Real ... www.trendmicro.com
  18. 18 InstallFix: Weaponizing malvertised install guides - Push Security pushsecurity.com
  19. 19 Tradecraft Tuesday Recap: axios npm Supply Chain Compromise www.huntress.com
  20. 20 Claude Fraud - When Trusted Tools Become the Attack Surface - 7AI blog.7ai.com
  21. 21 How attackers hosted a fake Claude download page on the claude ... www.helpnetsecurity.com
  22. 22 Inside FakeAgent: How a Claude Desktop Malvertising Campaign ... www.huntress.com
  23. 23 Axios NPM Package Compromised: Supply Chain Attack Hits ... www.trendmicro.com
  24. 24 Axios compromised: hijacked maintainer account pushes malicious ... www.endorlabs.com
  25. 25 Kaspersky GReAT: Top APT Group Targets APAC with Malware via Fake Claude App cxotoday.com
Etiketler
Share

Related Posts