Seven malicious NPM packages are leveraging the Adspect cloud service to deceive researchers and direct victims to cryptocurrency scam sites. The attack involves cloaking mechanisms, visitor fingerprinting, and redirections to fake cryptocurrency-related pages. #Adspect #NpmMaliciousPackages #CryptocurrencyScams
Keypoints
- Seven NPM packages published by ‘dino_reborn’ were used in the attack.
- Six packages contain malicious code that conducts visitor fingerprinting and redirection.
- The cloaking mechanism makes it difficult for security researchers to analyze the malicious web pages.
- Victims are redirected to fake cryptocurrency CAPTCHA pages or a benign company page based on detection.
- The attack aims to facilitate cryptocurrency scams while preventing detection through anti-analysis techniques.