As cited
Copy frozen at (site build).
threat intel
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Researchers discovered 13 malicious Composer packages on Packagist that inject JavaScript into Vietnamese streaming sites. The injected code performs mobile ad fraud and gambling redirects, and deploys spyware targeting unpatched iOS devices to steal cryptocurrency wallet seeds.
Why it matters: Organizations hosting or using Packagist dependencies and users of Vietnamese streaming platforms are exposed to crypto wallet theft and iOS compromise; practitioners should audit Packagist integrations and assess whether unpatched iOS users access their applications.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Researchers discovered 13 malicious Composer packages on Packagist that inject JavaScript into Vietnamese streaming sites. The injected code performs mobile ad fraud and gambling redirects, and deploys spyware targeting unpatched iOS devices to steal cryptocurrency wallet seeds.
Why it matters: Organizations hosting or using Packagist dependencies and users of Vietnamese streaming platforms are exposed to crypto wallet theft and iOS compromise; practitioners should audit Packagist integrations and assess whether unpatched iOS users access their applications.
- Source published
- First seen by Cybersecurity Tracker