You're listening to the Cyberwire Network, powered by N2K.

What's the common denominator in security incidents?

Escalations and lateral movement.

When a privileged account is compromised, attackers can seize control of

critical assets. With bad directory hygiene and years of technical debt, identity attack paths are

easy targets for threat actors to exploit, but hard for defenders to detect. This poses risk

in active directory, intra- ID, and hybrid configurations.

Identity leaders are reducing such risks with attack path management.

You can learn how attack path management is connecting identity and security teams

while reducing risk with Bloodhound Enterprise, powered by SpectorOps.

Head to SpectorOps.io today to learn more.

SpectorOps, see your attack paths the way adversaries do.

Thank you. This malicious NPM package puts malicious payload inside other locally installed software, atomic wallet and exodus in this case.

So malicious payload is still there. That means once you find out that that package is maybe malicious,

you remove it, but the malicious payload would stay still in Atomic Wallet software

and an Exododus wallet software.

So you would still be left with malicious payload,

even if you delete malicious NPM package.

That's Lucia Valentia Valentinic, software threat researcher from reversing labs.

The research we're discussing today is titled Atomic and Exodus crypto wallets targeted in malicious NPM campaign.

Thank you. In the last couple of months on NPM, there are a lot of packages that are malicious NPM that are targeting crypto community.

So we are paying close attention to those kind of packages.

...