En bref
Security researchers discovered a Node.js based stealer that runs cross platform (Windows/WSL, macOS, Linux) and harvests credentials from 13+ browsers (Chrome, Brave, Edge, Opera, Vivaldi, Yandex, etc.) plus 100+ cryptocurrency wallet...
Comment ca fonctionne
Security researchers discovered a Node.js based stealer that runs cross platform (Windows/WSL, macOS, Linux) and harvests credentials from 13+ browsers (Chrome, Brave, Edge, Opera, Vivaldi, Yandex, etc.) plus 100+ cryptocurrency wallet...
Signaux d'alerte
- Attackers package Node.js stealer as an NPM package → developers unknowingly install malicious dependencies
- Malware targets localhost paths typical of WSL environments → a signal of sophisticated cross platform design
- Embedded plain text payloads reveal intent to steal browser stored credentials with zero user interaction needed
Que faire
- 1Audit package.json dependencies: run npm audit or use socket.dev to scan for suspicious NPM packages
- 2Never run untrusted NPM install scripts with npm install g or global flags
- 3Rotate credentials if you installed NPM packages from unverified sources; enable 2FA on all accounts and store sensitive keys in dedicated hardware or vault tools
Source
FAQ
Cross Platform NPM Stealer Targets Browser Credentials and Crypto Wallets est une vraie arnaque ?
Oui. Traitez le message, l'appel ou la demande de paiement comme suspect jusqu'a verification via un canal officiel.
Quels sont les premiers signaux ?
Attackers package Node.js stealer as an NPM package → developers unknowingly install malicious dependencies; Malware targets localhost paths typical of WSL environments → a signal of sophisticated cross platform design; Embedded plain text payloads reveal intent to steal browser stored credentials with zero user interaction needed
Que faire en premier ?
Audit package.json dependencies: run npm audit or use socket.dev to scan for suspicious NPM packages; Never run untrusted NPM install scripts with npm install g or global flags; Rotate credentials if you installed NPM packages from unverified sources; enable 2FA on all accounts and store sensitive keys in dedicated hardware or vault tools
LegalAudit peut-il verifier mon cas ?
Oui. Lancez le chat gratuit et collez le message, le lien, l'expediteur ou les details de paiement.