Industrial systems targeted by suspicious NuGet package

Industrial cyberespionage could potentially be facilitated by the new suspicious SqzrFramework480 NuGet package seemingly targeted to developers using tools by Chinese industrial firm Bozhon Precision Industry Technology Co., according to The Hacker News. SqzrFramework480, which has amassed almost 3,000 downloads since being uploaded in late January, enables screenshot capturing, remote IP address pinging, and screenshot transmission to IP-connected sockets, a report from ReversingLabs revealed.

Source: SC Magazine

 


Date:

Categorie(s):

Tag(s):