Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
Published: (May 29, 2026 at 05:11 AM EDT)
1 min read
Source: The Hacker News
Source: The Hacker News
Malicious NuGet Package
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil’s largest cooperative financial systems, to siphon client IDs and PFX certificates.
According to Socket, versions 2.0.0 through 2.0.4 of Sicoob.Sdk contain functionality to exfiltrate sensitive information, including PFX certificates that are used to…