CyberHighSingle-sourceBuilding
6.7
Malicious NPM Package 'indexed-btree' Masquerades as 'sorted-btree', Millions of Downloads
SecurityWeekLO·about 6 hours ago
Threat actors are distributing fake LastPass installers that disable 145 security products via a kernel-level EDR killer and deliver the Rapuncel infostealer. The campaign impersonates at least 40 companies, indicating a broad, coordinated malware distribution effort. The use of a kernel-level EDR killer represents an escalation in evasion capability, posing a significant risk to enterprise and individual security.