Suspected North Korean Hackers Compromise Axios Package in Supply-Chain Attack
The malicious updates could expose credentials and downstream systems, and researchers said the package is downloaded more than 100 million times a week.
- Suspected North Korean hackers compromised the software package Axios on Tuesday, gaining control of a developer's account for three hours and pushing malicious updates to thousands of companies.
- Pyongyang relies on digital heists to fund nuclear and missile programs, a tactic the regime employed three years ago when infiltrating another popular software provider used by healthcare and hotel firms.
- John Hammond, security researcher at Huntress, identified about 135 compromised devices belonging to roughly 12 companies, describing the hack as "perfectly timed" given AI agents developing software without review.
- "We anticipate they will try to leverage the credentials," Charles Carmakal, Mandiant chief technology officer, warned, as experts expect recovery will take months while attackers target cryptocurrency assets.
- High-Profile, noisy operations are a price Pyongyang is willing to pay because the regime is not worried about its international reputation, Ben Read, director of strategic threat intelligence at Google-owned Wiz, noted.
80 Articles
80 Articles
RECIT - Uploaded nearly 100 million times a week by computer developers, Axios is a reference program, constantly used by web applications when they receive or send your information.
'Hundreds of thousands of stolen secrets could potentially be circulating as a result of these recent attacks': Google says North Korean hackers behind major attack on Axios
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
Saudi Gazette
AlKhaleej TodayNorth Korean hackers bug software that powers online services
Suspected North Korean hackers have bugged a behind-the-scenes software used by thousands of US companies in a major supply-chain attack that could take months to recover from, security experts said on Tuesday.
" Hundreds of thousands of stolen secrets may be circulating as a result of these recent attacks," says Google, warning that there may be more stealths of cryptomouses and 'ransomware' attacks.
Google security researchers link the Axios compromise to North Korean hackers.
Coverage Details
Bias Distribution
- 65% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
