Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. "The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to

#infosec #threatintel #extensions #phrases #recovery #firefox #malicious

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is enabled. So far, it has only been shown as a proof of concept, and there are no reports of its use in

#infosec #threatintel #code #libreoffice #macro #malicious #openoffice

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

#infosec #enterprise #asian #implants #linux #mail #malicious