New GlassWorm Malware Campaign Targets Developers with Sophisticated Data Theft Techniques
A recent wave of cyberattacks linked to the GlassWorm campaign has raised alarms among cybersecurity experts. This malware delivers a multifaceted threat, utilizing a fake Google Docs extension to infiltrate systems and steal sensitive data.
The attack primarily affects software developers who use platforms like npm and GitHub, where malicious packages are being distributed. Once installed, the malware logs keystrokes, captures screenshots, and exfiltrates cookies and session tokens. A notable feature is its ability to phish for cryptocurrency wallet recovery phrases through fake prompts.
The impact of this attack is severe, as it not only compromises personal data but also poses risks to financial assets. Users are advised to scrutinize the sources of their downloads and utilize tools like the open-source Glassworm-hunter to scan for potential threats.
Risk Level: High
Source: View Original Report
