Crypto Opinions & News Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

[MuzzMelbourne]

Content source

https://thehackernews.com/2023/03/rogue-nuget-packages-infect-net.html

The NuGet repository is the target of a new "sophisticated and highly-malicious attack" aiming to infect .NET developer systems with cryptocurrency stealer malware.

The 13 rogue packages, which were downloaded more than 160,000 times over the past month, have since been taken down.

"The packages contained a PowerShell script that would execute upon installation and trigger a download of a 'second stage' payload, which could be remotely executed," JFrog researchers Natan Nehorai and Brian Moussalli said.

While NuGet packages have been in the past found to contain vulnerabilities and be abused to propagate phishing links, the development marks the first-ever discovery of packages with malicious code.

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

NuGet Repository under attack! New malicious campaign aims to infect #DotNET developer systems with cryptocurrency stealer malware.

thehackernews.com