Bitcoin
Bitcoin (BTC)
$58,656.00 0.67111
Bitcoin price
Ethereum
Ethereum (ETH)
$3,150.31 0.36644
Ethereum price
BNB
BNB (BNB)
$531.25 -0.41161
BNB price
Solana
Solana (SOL)
$140.14 0.80735
Solana price
XRP
XRP (XRP)
$0.5357960 15.89185
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000173 4.70154
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000087 -2.22893
Pepe price
Bonk
Bonk (BONK)
$0.0000224 -2.05591
Bonk price
Bitcoin
Bitcoin (BTC)
$58,656.00 0.67111
Bitcoin price
Ethereum
Ethereum (ETH)
$3,150.31 0.36644
Ethereum price
BNB
BNB (BNB)
$531.25 -0.41161
BNB price
Solana
Solana (SOL)
$140.14 0.80735
Solana price
XRP
XRP (XRP)
$0.5357960 15.89185
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000173 4.70154
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000087 -2.22893
Pepe price
Bonk
Bonk (BONK)
$0.0000224 -2.05591
Bonk price
Bitcoin
Bitcoin (BTC)
$58,656.00 0.67111
Bitcoin price
Ethereum
Ethereum (ETH)
$3,150.31 0.36644
Ethereum price
BNB
BNB (BNB)
$531.25 -0.41161
BNB price
Solana
Solana (SOL)
$140.14 0.80735
Solana price
XRP
XRP (XRP)
$0.5357960 15.89185
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000173 4.70154
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000087 -2.22893
Pepe price
Bonk
Bonk (BONK)
$0.0000224 -2.05591
Bonk price
Bitcoin
Bitcoin (BTC)
$58,656.00 0.67111
Bitcoin price
Ethereum
Ethereum (ETH)
$3,150.31 0.36644
Ethereum price
BNB
BNB (BNB)
$531.25 -0.41161
BNB price
Solana
Solana (SOL)
$140.14 0.80735
Solana price
XRP
XRP (XRP)
$0.5357960 15.89185
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000173 4.70154
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000087 -2.22893
Pepe price
Bonk
Bonk (BONK)
$0.0000224 -2.05591
Bonk price

NuGet manager flooded with malicious Kraken, Solana packages

nuget-manager-flooded-with-malicious-kraken-solana-packages
Edited by
News
NuGet manager flooded with malicious Kraken, Solana packages

A set of malicious packages impersonating Kraken, Solana and Monero has flooded NuGet’s server as hackers launch new scams.

NuGet, a manager used for packaging and distributing software written with the .NET framework, appears to be a target for bad actors seeking to exploit vulnerabilities, impersonating crypto-related packages.

As first reported by Phylum researchers, six malicious packages — downloaded by a user named “Disti” — are pretending to be libraries and wrappers for Kraken, Solana, KuCoin and Monero. The bad actor reportedly also tried to bolster credibility by faking the download figures.

NuGet manager flooded with malicious Kraken, Solana packages - 1
NuGet’s repository of Disti | Source: Phylum

Once the malware is installed on a victim’s computer, it executes .cmd and .bat files with the help of two PowerShell scripts. Eventually, the scripts download an external file, trying to stay unnoticed by not producing visible output or errors.

After a long series of manipulations, the script downloads SeroXen RAT. This stealthy remote access trojan gained popularity when it was used alongside cheats for video games such as Call of Duty: Warzone and Fortnite. The trojan is well-known among cybercriminals as it gives them full access to a victim’s computer with low detection. As noted by BleepingComputer, the malware is still available on NuGet’s server.

As crypto.news earlier reported, a new iteration of the Ducktail phishing campaign also spreads PHP malware that can access and steal users’ Facebook accounts, browsing data, and even crypto wallets. The attackers are said to employ social engineering techniques and seek targets through LinkedIn, a professional networking website.

The malware is being distributed as an archive, including images, videos, and documents. Once the file has been downloaded and opened, browser cookies are read and transmitted to the hacker’s server.