Latest Supply Chain Attack news

Keyloggers Injected in Web Trust Seal Supply Chain Attack

Hackers compromised the script used by Best of the Web to display their trust seal on their customers' websites and to add two key logging scripts designed to sniff keystrokes from visitors.
- Sergiu Gatlan
- May 14, 2019
- 12:14 PM
- 0
Over 200 College Campus Stores Infected with Card Stealing Scripts

The checkout pages of hundreds of U.S. and Canadian online campus stores powered by the PrismWeb e-commerce platform were injected by a hacking group with a JavaScript-based payment card skimming script.
- Sergiu Gatlan
- May 03, 2019
- 01:17 PM
- 3
ShadowHammer Targets Multiple Companies, ASUS Just One of Them

ASUS was not the only company targeted by supply-chain attacks during the ShadowHammer hacking operation as discovered by Kaspersky, with at least six other organizations having been infiltrated by the attackers.
- Sergiu Gatlan
- April 23, 2019
- 09:40 AM
- 0
ASUS Admits Its Live Update Utility Was Backdoored by APT Group

Asus confirmed today that its Live Update utility has been indeed infected with malicious code by an advanced persistent threat (APT) group as part of a supply chain attack which managed to compromise some of its servers.
- Sergiu Gatlan
- March 26, 2019
- 11:55 AM
- 1
ASUS Live Update Infected with Backdoor in Supply Chain Attack

A new advanced persistent threat (APT) campaign detected by Kaspersky Lab in January 2019 and estimated to have run between June and November 2018 has allegedly impacted over 57,000 users who have downloaded the ASUS Live Update Utility on their computers.
- Sergiu Gatlan
- March 25, 2019
- 12:35 PM
- 1
Supply Chain Attack Hits Organizations In South Korea

Security researchers have uncovered a new supply chain attack that targets organizations in South Korea. The threat actor chooses the victims selectively, based on an IP range for groups of interest.
- Ionut Ilascu
- August 22, 2018
- 05:38 AM
- 0
Microsoft Discovers Supply Chain Attack at Unnamed Maker of PDF Software

Microsoft said today that hackers compromised a font package installed by a PDF editor app and used it to deploy a cryptocurrency miner on users' computers.
- Catalin Cimpanu
- July 26, 2018
- 03:36 PM
- 1
US Bill Hopes to Prevent IT Supply-Chain Issues Like the Kaspersky & ZTE Fiascos

Two US senators have proposed a bill this week that aims to address the issues with software and IT services provided to the US government and its agencies.
- Catalin Cimpanu
- June 21, 2018
- 01:05 PM
- 0
Chinese Cyberspies Appear to be Preparing Supply-Chain Attacks

Chinese cyberspies are evolving their tactics, focusing on IT staffers, relying more and more on spear-phishing instead of malware, and gathering code signing certificates from hacked software companies in the preparation of future supply-chain attacks.
- Catalin Cimpanu
- May 04, 2018
- 01:00 AM
- 0