Fake Ledger Live app in Microsoft Store steals $768,000 in crypto

November 7, 2023 at 06:07PM Microsoft has removed a fraudulent Ledger Live app from its store after users lost $768,000 worth of cryptocurrency assets. The fake app, called Ledger Live Web3, had been in the store since October 19 and started stealing cryptocurrency a few days ago. Despite obvious red flags, the app managed to … Read more

Malicious NuGet packages abuse MSBuild to install malware

October 31, 2023 at 10:29AM A new NuGet typosquatting campaign has been discovered that uses malicious packages to exploit Visual Studio’s MSBuild integration and install malware. This campaign targets Windows users and is the first documented case of threat actors leveraging this feature in malicious NuGet packages. The attackers continually refine their techniques, with earlier … Read more