Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
Teaser from the source
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on LastPass
Other advisories
- Not ratedosv:MAL-2024-6789Malicious code in bosh-lastpass_plugin (RubyGems)
- CriticalCVE-2023-41061BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061)
- MediumCVE-2020-35208LogMeIn LastPass: Sicherheitslücke
- MediumCVE-2020-35207LogMeIn LastPass: Sicherheitslücke
- MediumCVE-2020-35207LogMeIn LastPass: Sicherheitslücke
- MediumCVE-2020-35208LogMeIn LastPass: Sicherheitslücke
- MediumCVE-2013-5114LogMeIn LastPass: Sicherheitslücke
- MediumCVE-2013-5113LogMeIn LastPass: Sicherheitslücke
Other news entries
- Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDRNewsThe Hacker News
- Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ StealerNewsSecurityWeek
- 5 ways AI is reshaping the cybersecurity job marketNewsCSO Online
- LastPass, Bitwarden users targeted with fake security alertsNewsBleepingComputer
- BeyondTrust, LastPass Impacted by Klue-Salesforce IncidentNewsSecurityWeek
- LastPass confirms data breach in Klue supply chain attackNewsBleepingComputer
ID