PyPI malware ramps up the threat to the code repository
Tags
attack-pattern: Data Code Repositories - T1213.003 Code Repositories - T1593.003 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID c7dc6835-23c6-4995-9ee0-485638cc7c45
Fingerprint 8771199191e79610
Analysis status DONE
Considered CTI value 0
Text language
Published June 2, 2023, 6:24 a.m.
Added to db June 5, 2023, 11:05 a.m.
Last updated Sept. 3, 2024, 8:58 p.m.
Headline This malicious PyPI package mixed source and compiled code to dodge detection
Title PyPI malware ramps up the threat to the code repository
Detected Hints/Tags/Attributes 27/1/1
Source URLs
Redirection Url
Details Source https://www.theregister.com/2023/06/02/novel_pypi_attack_reversinglabs/
URL Provider
Details Provider Source level domain
Details theregister.com www.theregister.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 5 
full.py