SC Media and others say an Axios maintainer attributed an npm breach to UNC1069 social engineering using fake Slack and Teams setups to deploy a RAT and push malicious updates to millions of users, underscoring how maintainer targeting drives supply chain compromise.
Axios maintainer says social engineering by UNC1069 led to npm breach.
Attackers used a fake Slack/Teams setup to deploy a RAT and push malicious updates to millions of users.
Axios hack
Axios Attack Shows Social Complex Engineering Is Industrialized:
Axios maintainer’s post mortem confirms social engineering by UNC1069
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security