资讯

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware
The popular NPM package 'is' has been compromised in a supply chain attack that injected backdoor malware, giving attackers ...
腾讯网2 天
安全报告：至少3500个网站遭恶意注入隐藏门罗币挖矿脚本
金色财经报道，据Decrypt报道，网络安全公司c/side的研究人员报告，恶意门罗币XMR挖矿软件袭击多个网站，加密劫持浪潮再次出现，至少有3,500个网站正在运行恶意注入的隐藏门罗币(Monero)挖矿脚本。与传统的加密劫持不同，这些恶意软件通过限制CPU使用率并将流量隐藏在WebSocket流中，避免了传统加密劫持的明显特征。黑客遵 ...
Cryptopolitan2 天
Cryptojacking hits markets, Monero miner malware targets 3,500+ sites
Researchers report that over 3,500 websites have been compromised by stealthy JavaScript malware mining Monero without user ...
The Hacker News3 天
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics
Further dissection has determined that over 3,500 websites have been ensnared in the sprawling illicit crypto mining effort, with the domain hosting the JavaScript miner also linked to Magecart credit ...
Visual Studio Magazine4 年
New Azure Web PubSub Unveiled for Real-time WebSocket Apps
"WebSocket is a standardized protocol that provides full-duplex communication," Microsoft said in an April 29 blog post announcing the preview of Azure Web PubSub. "It is key to building efficient ...