NuGet manager flooded with malicious Kraken, Solana packages
A set of malicious packages impersonating Kraken, Solana and Monero has flooded NuGet’s server as hackers launch new scams. NuGet, a manager used for packaging and distributing software written with the .NET framework, appears to be a target for bad actors seeking to exploit vulnerabilities, impersonating crypto-related packages . As first reported by Phylum researchers, six malicious packages — downloaded by a user named “Disti” — are pretending to be libraries and wrappers for Kraken, Solana, KuCoin and Monero. The bad actor reportedly also tried to bolster credibility by faking the download figures. NuGet’s repository of Disti | Source: Phylum Once the malware is installed on a victim’s computer, it executes .cmd and .bat files with the help of two PowerShell scripts. Eventually, the scripts download an external file, trying to stay unnoticed by not producing visible output or errors. After a long series of manipulations, the script downl...