A package uploaded to NuGet, a popular open-source .NET package repository, has raised cyberespionage concerns due to its method of continuously exfiltrating screen captures from industrial equipment. The “SqzrFramework480” package was discovered by ReversingLabs after it was flagged by the company’s Titanium Platform during researchers’ routine threat hunting procedures.

Source: SC Magazine