Cybersecurity researchers have discovered two malicious packages uploaded to the Python Package Index (PyPI) repository that impersonated popular artificial intelligence (AI) models like OpenAI ChatGPT and Anthropic Claude to deliver an information stealer called JarkaStealer.
The packages, named gptplus and claudeai-eng, were uploaded by a user named “Xeroline” in November 2023, attracting Cybersecurity researchers have discovered two malicious packages uploaded to the Python Package Index (PyPI) repository that impersonated popular artificial intelligence (AI) models like OpenAI ChatGPT and Anthropic Claude to deliver an information stealer called JarkaStealer.
The packages, named gptplus and claudeai-eng, were uploaded by a user named “Xeroline” in November 2023, attracting
- Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign The Hacker [email protected] (The Hacker News)
- Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys The Hacker [email protected] (The Hacker News)
- GOP Cries Censorship Over Spam Filters That Work Krebs on SecurityBrianKrebs
- How Has IoT Security Changed Over the Past 5 Years? darkreadingArielle Waldman
- Critical SAP S/4HANA Vulnerability Under Attack, Patch Now darkreadingRob Wright
- The Beginner’s Guide to Using AI: 5 Easy Ways to Get Started (Without Accidentally Summoning Skynet)by Tech Jacks
- Tips and Tricks to Enhance Your Incident Response Proceduresby Tech Jacks
- Building a Security Roadmap for Your Company: Strategic Precision for Modern Enterprises by Tech Jacks
- The Power of Policy: How Creating Strong Standard Operating Procedures Expedites Security Initiativesby Tech Jacks
- Building a Future-Proof SOC: Strategies for CISOs and Infosec Leaders by Tech Jacks
- Security Gate Keeping – Annoying – Unhelpfulby Tech Jacks
- The Beginner’s Guide to Using AI: 5 Easy Ways to Get Started (Without Accidentally Summoning Skynet)
Leave A Reply