SECURITYAug 18 · 11:40 UTCTHE HACKER NEWS[email protected] (The Hacker News)

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers flagged a new typosquatting campaign targeting RubyGems users using a Windows-based information stealer. This campaign steals browser credentials and crypto wallets. OpenSourceMalware discovered the threat, which is currently being tracked under the moniker StubMaker.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

OpenSourceMalwareorganizationRubyGemstopicTyposquattingtopicWindowstopicStubMakertopicbrowser credentialstopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 1 · 09:43 UTC
Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
SECURITYMay 13 · 21:09 UTC
Attackers Weaponize RubyGems for Data Dead Drops
SECURITYJul 20 · 05:15 UTC
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
SECURITYMay 13 · 08:08 UTC
GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data
SECURITYMay 12 · 14:47 UTC
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded
SECURITYMay 29 · 21:46 UTC
Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries