This alert may not be shared outside your organization, Do Not Repost or send, place on other websites, List servers, or send to others via email, including other associations or parties. Members and Law enforcement use only. Contact us for any permissions. To do otherwise will result in the loss of membership.
Complete Story
09/25/2023
Understanding Malicious Package Attacks and Defense Strategies for Robust Cybersecurity
FORTRA
Malicious packages consist of software embedded with code that is capable of causing harm to an entire system or network. This is a rapidly growing threat affecting open-source software and the software supply chain. This attack method has seen a nearly 12,000% increase from 2022 to 2023, as reported by Synk. Some reasons include its technical feasibility, the potential for high returns, and the widespread distribution of open-source offerings,
Common types of malicious packages encompass:
- Windows .exe application installation files that install malware instead of the intended application.
- .deb or .rpm files that install a compromised server to a Linux system.
- A docker container image that includes malicious dependencies.
- A Python package that deploys an insecure version of a Python framework into a development environment.
Alerts
The FRPA alert system distinguishes us from other groups by gathering and providing information to law enforcement, retailers AND financial institutions.
more information
Resources
Your electronic library to help in fighting financial fraud for all of our partners.
more information