PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

Source: The Hacker News

Overview

Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems.

“While these wheel packages do implement the features described on their PyPI web pages, their true purpose is to covertly deliver malicious files,” — Kaspersky.