Diamond Member ThaHaka 0 Posted yesterday at 09:11 AM Diamond Member Share Posted yesterday at 09:11 AM This is the hidden content, please Sign In or Sign Up Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest cooperative financial systems, to siphon client IDs and PFX certificates. According to Socket, versions 2.0.0 through 2.0.4 of "Sicoob.Sdk" contain functionality to exfiltrate sensitive information, including PFX certificates that are used to This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/315176-h4ckn3wsmalicious-sicoob-nuget-steals-banking-credentials-as-npm-packages-target-cloud-secrets/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.