Security researchers have uncovered a coordinated RubyGems supply chain attack dubbed SleeperGem, in which malicious package releases delivered a persistent backdoor to developers’ machines. Between July 1818 and July 1919, 2026, attackers published trojanized versions of three RubyGems packages, git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab. The packages were uploaded directly to RubyGems.org without corresponding source code commits […]
The post North Korean Hackers Hide OTTERCOOKIE Malware in SVG Images to Backdoor Developers appeared first on Cyber Security News.