Linux Backdoors Are Dressing Up as Your Email Security Software
Rapid7 found Linux implants in South Korea and Taiwan posing as products like SpamSniper and ShareTech, and using SMTP for command and control. Here is what was reported and what defenders can do about it.
MALFEX: Eight Malicious npm Packages, 40,767 Downloads, and an ASCII Art Font That Drops a RAT
A lone, Portuguese-speaking operator has been seeding npm with malware since 2023, and three of the eight flagged packages are reportedly still live. Here's how the MALFEX campaign works and what I'd check in my own projects today.