Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-05-29 09:11 UTC
Importiert: 2026-06-06 08:27 UTC
Quelle-ID: thn_global
uid_hash: 7bbdcc45f09104d211daad2645fc1ce579eacdebed6f4cd2520046d1410a4756

The Hacker News

Inhalt

Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest cooperative financial systems, to siphon client IDs and PFX certificates.

According to Socket, versions 2.0.0 through 2.0.4 of "Sicoob.Sdk" contain functionality to exfiltrate sensitive information, including PFX certificates that are used to

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste