Infostealer news

A new variant of the 'SHub' macOS infostealer is targeting users with fake Apple security update prompts. The malware uses AppleScript to display a convincing dialog box, tricking users into entering their password. This installs a backdoor, giving attackers access to steal browser data and cryptocurrency wallets.

A recently leaked malware kit named "Shai-Hulud" is now being used in a new campaign targeting the npm registry. Attackers are publishing infected packages to steal sensitive information from developers' systems, including credentials and cryptocurrency wallets. This highlights the ongoing risk of software supply chain attacks.