From infostealer to full RAT: dissecting the PureRAT attack chain

Researchers map a campaign that escalated from a Python infostealer to a full PureRAT backdoor — loaders, evasions, and ...

Python developers targeted with new password-stealing phishing attacks - here's how to stay safe

PyPI warns phishing attacks will persist using fake domains and urgent email tactics Victims are tricked into verifying ...
Infosecurity Magazine

Confucius Shifts from Document Stealers to Python Backdoors

The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like ...
Bleeping Computer

PyPI urges users to reset credentials after new phishing attacks

The Python Software Foundation has warned victims of a new wave of phishing attacks using a fake Python Package Index (PyPI) website to reset credentials. Accessible at pypi.org, PyPI is the default ...