New Octopus Scanner malware spreads via GitHub supply chain attack

guest · May 28, 2020

New Octopus Scanner malware spreads via GitHub supply chain attack
May 28, 2020
https://www.bleepingcomputer.com/ne...lware-spreads-via-github-supply-chain-attack/

Security researchers have found a new malware that finds and backdoors open-source NetBeans projects hosted on the GitHub web-based code hosting platform to spread to Windows, Linux, and macOS systems and deploy a Remote Administration Tool (RAT).

The malware dubbed Octopus Scanner by researchers at the GitHub Security Lab compromises the NetBeans repositories by planting malicious payloads within JAR binaries, project files and dependencies, later spreading to downstream development systems.

"Infecting build artifacts is a means to infect more hosts since the infected project will most likely get built by other systems and the build artifacts will probably be loaded and executed on other systems as well," the researchers explain.
The malware is also designed to block new builds from replacing the compromised one by keeping its malicious build artifacts in place.
Click to expand...

While investigating this malware, GitHub Security Lab researchers found 26 open source projects compromised by Octopus Scanner that inadvertently served up its backdoored code to any developers that would fork or clone the repos.
Click to expand...

GitHub Security Lab: The Octopus Scanner Malware: Attacking the open source supply chain

Log in or Sign up

New Octopus Scanner malware spreads via GitHub supply chain attack

guest Guest

Log in or Sign up

New Octopus Scanner malware spreads via GitHub supply chain attack

guest Guest

Useful Searches