Background Investigation Methods, Cyber Defense Strategies, Cyber Due Diligence, Fraud Investigation Techniques, Hacker News

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

Pypi Cryptocurrency Malware Vonfic

A new malicious package discovered in the Python Package Index (PyPI) has been found to impersonate a popular library for symbolic mathematics to deploy malicious payloads, including a cryptocurrency miner, on Linux hosts.
The package, named sympy-dev, mimics SymPy, replicating the latter’s project description verbatim in an attempt to deceive unsuspecting users into thinking that they are

Leave a Reply

Your email address will not be published. Required fields are marked *