Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data. The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including user accounts, role assignments, and permission mappings, as well as manipulates authorization rules to create persistent backdoors in victim applications.
source https://thehackernews.com/2026/02/malicious-nuget-packages-stole-aspnet.html
Wednesday, February 25, 2026
Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box