Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Our threat research team recently uncovered new npm packages that are used to download a new info-stealer variant that uses the popular Electron framework to disguise itself as a legitimate application. In this blog post, we’ll analyze the attack flow of this new info-stealer we detected and explain how it can stay undetected by abusing trusted development tools like Electron.

Domain Name System (DNS), informally referred to as the “phonebook of the internet,” is one of the mainstay protocols that makes the internet work by translating reader-friendly domain names into IP addresses and vice-versa.

An integrated physical and digital security access system provides campus law enforcement and security with a more holistic view of activities on campus. When access and identity are further integrated with video surveillance, intercoms, and visitor management, security is strengthened even more. The University of Washington and Michigan State University recently announced plans to expand campus physical and digital security systems.

Cyber threats are increasingly affecting universities and colleges in the USA. Institutions have experienced a surge in cyber attacks in recent years, including data breaches, ransomware attacks, phishing scams, and malware infections. One driving factor for this increase is the valuable data higher education institutions hold, including sensitive personal information of students, faculty members, and staff, as well as important research data and intellectual property.

CentOS 7 has been a popular choice for many businesses and developers due to its stability, robustness, and compatibility with enterprise-level applications. According to W3Techs, CentOS is used by 2.8% of all the websites whose operating system is known. However, as announced on the official CentOS blog, the end of life (EOL) for CentOS 7 is fast approaching. This means that after June 30, 2024, CentOS 7 will no longer receive official support, updates, or security patches.