
979 downloads recorded for MALFEX campaign's imgdecode npm package
Supply chain attack uses compiled Node.js addon to inject encrypted shellcode into Windows systems via GitHub retrieval.
The BitShield News Threat Desk is the part of the BitShield News newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 5 articles so far. See the editorial policy or report an error.

Supply chain attack uses compiled Node.js addon to inject encrypted shellcode into Windows systems via GitHub retrieval.

Attackers installed Pawns.app on network gear across 34 countries to resell bandwidth, bypassing security checks by using real residential IPs.

A massive phishing operation using three linked kits and thousands of rotating domains targets banks and retailers in Japan, forcing defenders to rethink static blocking strategies.

A European bank contained an unsophisticated attack that exploited weak VPN authentication and unpatched servers, highlighting the persistent risk of third-party access gaps.

The National Center for Cyber Security declares a state of emergency after dozens of major Japanese companies, including JR East, disclose data breaches.