MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

Summary

The MALFEX campaign has been identified by CloudSEK, leveraging malicious npm packages to distribute the Overlord RAT. This malware is designed to steal sensitive data, including credentials from Discord and various web browsers. The attack highlights the ongoing risks associated with the software supply chain and the use of open-source repositories.

Indicators of Compromise

• malware — Overlord RAT

Entities