‘Package confusion’ attack against NPM used to trick developers into downloading malware

In different phrases, there isn’t any single handle, IP, or server to dam. That mentioned, there are downsides to the approach that aren’t talked about by Checkmarx, together with the truth that blockchain communication is sluggish, in addition to public. The blockchains can’t be edited, or blocked simply, however they are often tracked as soon as their use as a part of malware C2 has been uncovered. 

Regardless of previous predictions that the approach would take off, that is in all probability why utilizing blockchains for C2 stays the experimental protect of specialist malware.

Bundle confusion

Maybe the extra important a part of the story is that the approach is getting used to focus on testing instruments distributed through NPM, the most important open supply JavaScript registry. Concentrating on testing instruments is one other solution to get contained in the privileged developer testing environments, and any deeper entry to the CI/CD pipelines that they reveal.