All articles tagged with #typosquatting
A malicious domain mimicking Microsoft's MAS tool was used to spread Cosmali Loader malware via PowerShell, exploiting user typos to infect Windows systems with cryptomining and RAT malware. Users are advised to verify commands and avoid executing untrusted remote code to prevent infection.
Researchers have discovered hundreds of malicious code libraries on NPM that attempt to install malware on developers' machines. These packages use typosquatting to trick developers into downloading them, and they connect to IP addresses stored on the Ethereum blockchain to fetch additional malicious files and send system information back to the attackers. The campaign highlights the importance of verifying package names before installation to avoid such threats.