Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Source: The Hacker News

Malicious NuGet Packages Target ASP.NET Developers

Exfiltrated Data

Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data. The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including:

• User accounts
• Role assignments
• Permission mappings

Persistent Backdoors

In addition, the attackers manipulate authorization rules to create persistent backdoors in victim applications.