NPM package caught using QR Code to fetch cookie-stealing malware

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...
Infosecurity Magazine

Attackers Adopt Novel LOTL Techniques to Evade Detection

HP Wolf has reported the use of multiple, uncommon binaries and novel uses of legitimate image files in recent malicious ...