Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials and a remote access trojan (RAT) capable of executing arbitrary code on infected machines through PyPI and Docker registries.PyPI quarantined the trojanized version of the... Weiterlesen: LiteLLM supply chain attack hoovers up passwords and secrets
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM supply chain attack hoovers up passwords and secrets
Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI…
Malware / Trojaner / Viren www.theregister.com - Articles 1 Min. Lesezeit TA0011 · T1071 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes
T1195TA0011 · Command and Control
Supply Chain Compromise
Mitigation: M1045 Code Signing
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
35 Bronnen
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
34 andere bronnen
VVulDB Updates2 uur geledenCVE-2024-38625 | Linux Kernel up to 6.6.32/6.9.3 ntfs3 null pointer dereference (6c8054d59066/ff1068929459/1cd6c96219c4) VVulDB Updates2 uur geledenCVE-2024-38570 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 gfs2 sd_dead_glocks use after free (Nessus ID 207818 / WID-SEC-2024-1418) VVulDB Updates2 uur geledenCVE-2024-36968 | Linux Kernel up to 6.6.31/6.8.10/6.9.1 Bluetooth l2cap_le_flowctl_init buffer overflow (Nessus ID 212722) VVulDB Updates2 uur geledenCVE-2024-36881 | Linux Kernel up to 6.6.30/6.8.9 userfaultfd close memory corruption (377f3a9a3d03/8d8b68a5b0c9/c88033efe9a3 / WID-SEC-2024-1259) VVulDB Updates2 uur geledenCVE-2024-27041 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 amdgpu_dm_fini null pointer dereference (WID-SEC-2024-1008) VVulDB Updates2 uur geledenCVE-2023-52653 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 SUNRPC gss_import_v2_context memory leak (Nessus ID 209785 / WID-SEC-2024-1008)
+28
9 Bronnen
Binance suffers the largest crypto hack on record.
8 andere bronnen
NNYT > Cybersecurity1 uur geledenBinance Lost Over $6 Billion in Crypto Hack. Here’s What to Know. IIT Security Guru2 uur geledenBinance’s $6.3bn heist: how one laptop opened the door to the biggest crypto theft in history CCybersecurity Dive3 uur geledenNorth Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack LLatest from ITPro1 uur geledenThe Binance hack explained Iit-daily.net1 uur geledenWie sicher sind unsere Bitcoins nach dem Binance-Hack wirklich? SSlashdot2 uur geledenBinance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected [UPDATE]
+2
8 Bronnen
CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514)
7 andere bronnen
VVulDB Updates2 uur geledenCVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514) VVulDB Updates2 uur geledenCVE-2026-95277 | Google Chrome up to 153.0.8010.52 Views use after free (WID-SEC-2026-3514) VVulDB Updates2 uur geledenCVE-2026-95278 | Google Chrome up to 153.0.8010.52 WakeLock authorization (WID-SEC-2026-3514) VVulDB Updates2 uur geledenCVE-2026-95276 | Google Chrome up to 153.0.8010.52 Themes input validation (WID-SEC-2026-3514) VVulDB Updates2 uur geledenCVE-2026-95280 | Google Chrome up to 153.0.8010.52 V8 race condition (WID-SEC-2026-3514) VVulDB Updates2 uur geledenCVE-2026-95279 | Google Chrome up to 153.0.8010.52 Omnibox clickjacking (WID-SEC-2026-3514)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4288073/malware-trojans-virussen/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/