.NET developers are being targeted with malware designed to steal their cryptocurrency, new reports have claimed.Cybersecurity researchers from JFrog recently spotted an active campaign in which malicious packages were uploaded to the NuGet repository, for .NET developers to download and use. When activated, the packages download and run a PowerShell dropper called init.ps1, which changes the endpoint’s settings to allow PowerShell scripts to be executed without restrictions.Custom payloadsThat feature alone was enough of a red flag to warrant the package’s
…
Read more
