How APTs Steal Your Secrets

Описание: http://www.tcm.rocks/pmrp-y - Want to learn more about malware? Get certified as a malware research professional with us.

Picture this: You’re installing a popular JavaScript library. Shortly after installation, you discover it has been stealing your secrets, mining crypto, or opening a backdoor on your machine.

This is just how supply chain attacks often unfold in the Node.js ecosystem. It’s become more common in recent years, with attackers smuggling malware into widely used open source packages.

In today’s video, Alex investigates one incident that occurred last April. He reviews the infected package, how the malware was discovered, and what it actually does.

Want to see more videos like this one? Let us know and we’ll make content like this a regular feature.

https://www.aikido.dev/blog/xrp-suppl... - Shoutout to the Aikido team for putting together some amazing research!

https://www.tcm.rocks/pmat-y - Try our malware analysis course in the TCM Security Academy today! Memberships start at $29.99 USD for a month of access.

#malware #cybersecurity #infosec #cryptomining #apts #advancedpersistentthreats

Sponsor a Video: https://www.tcm.rocks/Sponsors
Pentests & Security Consulting: https://tcm-sec.com
Get Trained: https://academy.tcm-sec.com
Get Certified: https://certifications.tcm-sec.com
Merch: https://merch.tcm-sec.com

📱Social Media📱
___________________________________________
X: https://x.com/TCMSecurity
Twitch:   / thecybermentor  
Instagram:   / tcmsecurity  
LinkedIn:   / tcm-security-inc  
TikTok:   / tcmsecurity  
Discord:   / discord  
Facebook:   / tcmsecure  

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:
  / thecybermentor  
Support the stream (one-time): https://streamlabs.com/thecybermentor

Hacker Books:
Penetration Testing: A Hands-On Introduction to Hacking: https://amzn.to/31GN7iX
The Hacker Playbook 3: https://amzn.to/34XkIY2
Hacking: The Art of Exploitation: https://amzn.to/2VchDyL
The Web Application Hacker's Handbook: https://amzn.to/30Fj21S
Real-World Bug Hunting: A Field Guide to Web Hacking: https://amzn.to/2V9srOe
Social Engineering: The Science of Human Hacking: https://amzn.to/31HAmVx
Linux Basics for Hackers: https://amzn.to/34WvcXP
Python Crash Course, 2nd Edition: https://amzn.to/30gINu0
Violent Python: https://amzn.to/2QoGoJn
Black Hat Python: https://amzn.to/2V9GpQk

My Build:
lg 32gk850g-b 32" Gaming Monitor:https://amzn.to/30C0qzV
darkFlash Phantom Black ATX Mid-Tower Case: https://amzn.to/30d1UW1
EVGA 2080TI: https://amzn.to/30d2lj7
MSI Z390 MotherBoard: https://amzn.to/30eu5TL
Intel 9700K: https://amzn.to/2M7hM2p
G.SKILL 32GB DDR4 RAM: https://amzn.to/2M638Zb
Razer Nommo Chroma Speakers: https://amzn.to/30bWjiK
Razer BlackWidow Chroma Keyboard: https://amzn.to/2V7A0or
CORSAIR Pro RBG Gaming Mouse: https://amzn.to/30hvg4P
Sennheiser RS 175 RF Wireless Headphones: https://amzn.to/31MOgpu

My Recording Equipment:
Panasonic G85 4K Camera: https://amzn.to/2Mk9vsf
Logitech C922x Pro Webcam: https://amzn.to/2LIRxAp
Aston Origin Microphone: https://amzn.to/2LFtNNE
Rode VideoMicro: https://amzn.to/309yLKH
Mackie PROFX8V2 Mixer: https://amzn.to/31HKOMB
Elgato Cam Link 4K: https://amzn.to/2QlicYx
Elgate Stream Deck: https://amzn.to/2OlchA5

*We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites.