• Disclaimer
  • Copyright
  • About Us
  • Privacy Policy for Netfest
  • Contact
  • Advertise
Tech News, Magazine & Review WordPress Theme 2017
  • Home
  • News
    BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

    BGMI 3.7 Update mod (hack) apk is now available for download!

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    India's Reserve Bank of India (RBI) has launched a unique "bank.in" domain aimed at tackling digital banking fraud.

    India’s Reserve Bank of India (RBI) has launched a unique “bank.in” domain aimed at tackling digital banking fraud.

    There's no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar. (Image via Rockstar Games)

    There’s no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

  • Review
    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    MSI GE66 Raider Review

    MSI GE66 Raider Review

    iPhone SE (2020) review

    iPhone SE (2020) review

    Samsung Galaxy S20 Review (Indian Variant)

    Samsung Galaxy S20 Ultra review

    Samsung Galaxy S20 Review (Indian Variant)

    Samsung Galaxy S20 Review (Indian Variant)

    OnePlus 8 Pro review

    OnePlus 8 Pro review

  • Gaming
    BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

    BGMI 3.7 Update mod (hack) apk is now available for download!

    There's no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar. (Image via Rockstar Games)

    There’s no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar.

    BGMI 120 FPS APK AVAILABLE FOR DOWNLOAD

    BGMI 120 FPS APK AVAILABLE FOR DOWNLOAD

    BGMI Cover-Credits:  pxfuel. com

    zero recoil sensitivity bgmi code for android

    BGMI Mod Apk Review: Features and Benefits Explained

    Installing the BGMI Mod Apk 3.6.0 (ESP, Aimbot, Menu)

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

  • Gear
    • All
    • Camera
    • Laptop
    • Smartphone
    Samsung Galaxy S24 Plus Under ₹60,000: Check Offer Details

    Check out the latest price for the Samsung Galaxy S24 Plus at Flipkart’s Monumental Sale, which is 40% off.

    Amazon does not want you to read this Kindle jailbreak tutorial. netfest.in

    Amazon does not want you to read this Kindle jailbreak tutorial.

    oneplus 13 / oneplus 13R review

    Oneplus 13/13R Review-Are you considering upgrading? Here are several reasons why the OnePlus 13 and 13R are essential.

    Oneplus 13 / oneplus 13R review

    Phones Arriving in January 2025: From the OnePlus 13 to the Samsung Galaxy S25 Series

    BGMI Cover-Credits:  pxfuel. com

    zero recoil sensitivity bgmi code for android

    Realme X7 India Date Out , India Price 14.999? Confirms Company's CEO

    Realme X7 India Date Out , India Price 14.999? Confirms Company’s CEO

  • Computers
    Apple Intelligence is set to launch in India this April, starting with the English language.

    Apple Intelligence is set to launch in India this April, starting with the English language.

    Microsoft lists features removed in Windows 10 version 2004

    Microsoft lists features removed in Windows 10 version 2004

    Ubuntu 20.10 Release Date & Planned Features

    Ubuntu 20.10 Release Date & Planned Features

    MSI GE66 Raider Review

    MSI GE66 Raider Review

    MSI Creator 17 is the first Mini LED laptop in the world

    MSI Creator 17 is the first Mini LED laptop in the world

    Microsoft offers $100,000 to hack its custom Linux OS

    Microsoft offers $100,000 to hack its custom Linux OS

  • Applications
    Download TallyPrime 6.0 Beta and enjoy early access!

    Download TallyPrime 6.0 Beta and enjoy early access!

    "Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04/24.10"

    Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04

    Windows 11 KB5050021 23H2 has been released, bringing new features along with a direct download option for the .msu file.

    Windows 11 KB5050021 23H2 has been released, bringing new features along with a direct download option for the .msu file.

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    Microsoft is teasing a new Windows 10 Start Menu

    Microsoft is teasing a new Windows 10 Start Menu

    Microsoft lists features removed in Windows 10 version 2004

    Microsoft lists features removed in Windows 10 version 2004

  • Security
    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

    Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

    GitHub Desktop has a vulnerability that can lead to credential leaks through malicious remote URLs.

    GitHub Desktop has a vulnerability that can lead to credential leaks through malicious remote URLs.

    RANsacked: More than 100 security flaws detected in LTE and 5G network configurations.

    RANsacked: More than 100 security flaws detected in LTE and 5G network configurations.

    Uncover Concealed Browsing Dangers: Complimentary Risk Evaluation for GenAI, Identity, Web, and SaaS Vulnerabilities.

    Uncover Concealed Browsing Dangers: Complimentary Risk Evaluation for GenAI, Identity, Web, and SaaS Vulnerabilities.

No Result
View All Result
  • Home
  • News
    BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

    BGMI 3.7 Update mod (hack) apk is now available for download!

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    India's Reserve Bank of India (RBI) has launched a unique "bank.in" domain aimed at tackling digital banking fraud.

    India’s Reserve Bank of India (RBI) has launched a unique “bank.in” domain aimed at tackling digital banking fraud.

    There's no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar. (Image via Rockstar Games)

    There’s no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

  • Review
    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    DeepSeek R1 has been jailbroken to create scripts for ransomware development.

    MSI GE66 Raider Review

    MSI GE66 Raider Review

    iPhone SE (2020) review

    iPhone SE (2020) review

    Samsung Galaxy S20 Review (Indian Variant)

    Samsung Galaxy S20 Ultra review

    Samsung Galaxy S20 Review (Indian Variant)

    Samsung Galaxy S20 Review (Indian Variant)

    OnePlus 8 Pro review

    OnePlus 8 Pro review

  • Gaming
    BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

    BGMI 3.7 Update mod (hack) apk is now available for download!

    There's no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar. (Image via Rockstar Games)

    There’s no need to be concerned about a delay for GTA 6 at this point, according to a source within Rockstar.

    BGMI 120 FPS APK AVAILABLE FOR DOWNLOAD

    BGMI 120 FPS APK AVAILABLE FOR DOWNLOAD

    BGMI Cover-Credits:  pxfuel. com

    zero recoil sensitivity bgmi code for android

    BGMI Mod Apk Review: Features and Benefits Explained

    Installing the BGMI Mod Apk 3.6.0 (ESP, Aimbot, Menu)

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

  • Gear
    • All
    • Camera
    • Laptop
    • Smartphone
    Samsung Galaxy S24 Plus Under ₹60,000: Check Offer Details

    Check out the latest price for the Samsung Galaxy S24 Plus at Flipkart’s Monumental Sale, which is 40% off.

    Amazon does not want you to read this Kindle jailbreak tutorial. netfest.in

    Amazon does not want you to read this Kindle jailbreak tutorial.

    oneplus 13 / oneplus 13R review

    Oneplus 13/13R Review-Are you considering upgrading? Here are several reasons why the OnePlus 13 and 13R are essential.

    Oneplus 13 / oneplus 13R review

    Phones Arriving in January 2025: From the OnePlus 13 to the Samsung Galaxy S25 Series

    BGMI Cover-Credits:  pxfuel. com

    zero recoil sensitivity bgmi code for android

    Realme X7 India Date Out , India Price 14.999? Confirms Company's CEO

    Realme X7 India Date Out , India Price 14.999? Confirms Company’s CEO

  • Computers
    Apple Intelligence is set to launch in India this April, starting with the English language.

    Apple Intelligence is set to launch in India this April, starting with the English language.

    Microsoft lists features removed in Windows 10 version 2004

    Microsoft lists features removed in Windows 10 version 2004

    Ubuntu 20.10 Release Date & Planned Features

    Ubuntu 20.10 Release Date & Planned Features

    MSI GE66 Raider Review

    MSI GE66 Raider Review

    MSI Creator 17 is the first Mini LED laptop in the world

    MSI Creator 17 is the first Mini LED laptop in the world

    Microsoft offers $100,000 to hack its custom Linux OS

    Microsoft offers $100,000 to hack its custom Linux OS

  • Applications
    Download TallyPrime 6.0 Beta and enjoy early access!

    Download TallyPrime 6.0 Beta and enjoy early access!

    "Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04/24.10"

    Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04

    Windows 11 KB5050021 23H2 has been released, bringing new features along with a direct download option for the .msu file.

    Windows 11 KB5050021 23H2 has been released, bringing new features along with a direct download option for the .msu file.

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    For free, you may get the BGMI iOS App from the following link: Is BFMI iOS Download for free in 2 GB Ram? The complete list of iPhones

    Microsoft is teasing a new Windows 10 Start Menu

    Microsoft is teasing a new Windows 10 Start Menu

    Microsoft lists features removed in Windows 10 version 2004

    Microsoft lists features removed in Windows 10 version 2004

  • Security
    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Malicious machine learning models on Hugging Face exploit a flawed Pickle format to avoid detection.

    Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

    Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

    GitHub Desktop has a vulnerability that can lead to credential leaks through malicious remote URLs.

    GitHub Desktop has a vulnerability that can lead to credential leaks through malicious remote URLs.

    RANsacked: More than 100 security flaws detected in LTE and 5G network configurations.

    RANsacked: More than 100 security flaws detected in LTE and 5G network configurations.

    Uncover Concealed Browsing Dangers: Complimentary Risk Evaluation for GenAI, Identity, Web, and SaaS Vulnerabilities.

    Uncover Concealed Browsing Dangers: Complimentary Risk Evaluation for GenAI, Identity, Web, and SaaS Vulnerabilities.

No Result
View All Result
NetFest
No Result
View All Result

“Cybersecurity Alert: Quasar RAT Hidden in Obfuscated NPM Package Mimicking Ethereum Utility”

Nimesh Dama by Nimesh Dama
02/01/2025
145 7
Home Security
Share on FacebookShare on Twitter

“New Trojan Threat: Quasar RAT Disguised as Ethereum Security Tool”

Researchers studying cybersecurity have found a malicious package on the npm package registry that poses as a library for identifying Ethereum smart contract vulnerabilities but actually installs Quasar RAT, an open-source remote access trojan, on developer PCs.

The heavily obfuscated package, named ethereumvulncontracthandler, was published to npm on December 18, 2024, by a user named “solidit-dev-416.” As of writing, it continues to be available for download. It has been downloaded 66 times to date.

npm
"Cybersecurity Alert: Quasar RAT Hidden in Obfuscated NPM Package Mimicking Ethereum Utility" 44

In an analysis released this month, socket security researcher Kirill Boychenko stated, “Upon installation, it gets a malicious script from a remote server, executing it silently to distribute the RAT on Windows systems.”

In order to evade analysis and detection efforts, the malicious code encoded in ethereumvulncontracthandler is hidden using several layers of obfuscation, including strategies like Base64- and XOR-encoding in addition to minification.

Before executing a second-stage payload from a distant serverIn an analysis released this month, socket security researcher Kirill Boychenko stated, “Upon installation, it gets a malicious script from a remote server, executing it silently to distribute the RAT on Windows systems.”

In order to evade analysis and detection efforts, the malicious code encoded in ethereumvulncontracthandler is hidden using several layers of obfuscation, including strategies like Base64- and XOR-encoding in addition to minification.

Before executing a second-stage payload from a distant server (“jujuju[.]lat”), the virus additionally checks to make sure it will not run in sandboxed environments. The script’s purpose is to launch Quasar RAT by executing PowerShell commands., the virus additionally checks to make sure it will not run in sandboxed environments. The script’s purpose is to launch Quasar RAT by executing PowerShell commands.

For its part, the remote access trojan contacts a command-and-control (C2) server (“captchacdn[.]com:7000”) to obtain additional instructions that enable it to collect and exfiltrate data, and it establishes persistence through changes to the Windows Registry.

Since its initial public release on GitHub in July 2014, Quasar RAT has been employed by a number of threat actors for both cybercrime and cyberespionage operations.

Boychenko stated, “If this campaign is a component of a botnet infection, the threat actor also uses this C2 server to catalog infected devices, and manage numerous compromised hosts simultaneously.”

“At this point, the threat actor has full control and surveillance over the victim’s system, which is ready for frequent check-ins and to receive updated instructions.”

The Ballooning Problem of Fake Stars on GitHub

The revelation coincides with a recent study conducted by Socket and researchers from North Carolina State University and Carnegie Mellon University that found a sharp increase in fake “stars” that are used to fictitiously boost the popularity of GitHub repositories infected with malware.

Although the situation has been there for a while, the study found that most bogus stars are used to advertise temporary malware repositories that pose as bitcoin bots, gaming hacks, and pirating software.

The “open” black market, which is promoted by GitHub star merchants such as Baddhi Shop, BuyGitHub, FollowDeh, R for Rank, and Twidium, is thought to be responsible for as many as 4.5 million “fake” stars from 1.32 million accounts and 22,915 projects, demonstrating the scope of the issue.

According to The Hacker News, 1,000 GitHub stars may be purchased for $110 at the Baddhi Shop. According to the website’s description, “Buy GitHub Followers, Stars, Forks, and Watchers to increase your repository’s legitimacy and visibility,” “Your project will attract more developers and contributors if you have real interaction!”

According to the researchers, “just a few repositories with phony star campaigns are published in package registries such as npm and PyPI.” “Even fewer are used extensively. The activity patterns of at least 60% of the accounts involved in false star campaigns are insignificant.

The findings confirm that star count alone is a poor indicator of quality or reputation and should not be utilized without additional review, as the open-source software supply chain remains a desirable target for cyberattacks.

The Microsoft-owned code hosting company told WIRED in an October 2023 statement that it has been aware of the issue for years and is actively working to eliminate bogus stars from the site.

According to the researchers, “the primary weakness of star count as a statistic is that all GitHub users’ actions have equal weight in its definition.”

Therefore, as we have demonstrated in our study, a large number of bot accounts or (perhaps poor reputation) crowdsourced individuals can readily inflate the star count. In order to prevent this kind of abuse, GitHub might think about introducing a weighted indicator of repository popularity (based on network centrality dimensions, for example), which is far more difficult to falsify.

Tags: "New Trojan Threat: Quasar RAT Disguised as Ethereum Security Tool"installs Quasar RAT
Nimesh Dama

Nimesh Dama

Founder and Editor-in-Chief of 'NetFest News,' Nimesh is a cybersecurity analyst, Gadgets review, Tech News, Information Security professional, developer, and a white hat hacker

Next Post
oneplus 13 / oneplus 13R review

Oneplus 13/13R Review-Are you considering upgrading? Here are several reasons why the OnePlus 13 and 13R are essential.

Leave a ReplyCancel reply

Recommended

BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

BGMI 3.7 Update mod (hack) apk is now available for download!

15/02/2025
In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

12/02/2025

Trending

“Cybersecurity Alert: Quasar RAT Hidden in Obfuscated NPM Package Mimicking Ethereum Utility”

“Cybersecurity Alert: Quasar RAT Hidden in Obfuscated NPM Package Mimicking Ethereum Utility”

02/01/2025
BGMI Mod Apk Review: Features and Benefits Explained

Installing the BGMI Mod Apk 3.6.0 (ESP, Aimbot, Menu)

29/01/2025
"Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04/24.10"

Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04

28/01/2025
Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

31/01/2025
BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

BGMI 3.7 Update mod (hack) apk is now available for download!

15/02/2025
netfest.in logo

We bring you the best Premium Tech News,Review & Penetration Testing News, magazine, personal blog, etc. Check our landing page for details.

Categories

  • Apple
  • Applications
  • Camera
  • Computers
  • Course/Jobs
  • Gaming
  • Gear
  • Laptop
  • Microsoft
  • News
  • Review
  • Security
  • Smartphone
  • Uncategorized

Recent News

BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

BGMI 3.7 Update mod (hack) apk is now available for download!

15/02/2025
In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

12/02/2025
  • Trending
  • Comments
  • Latest
Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

Broadcom has released patches for vulnerabilities in VMware Aria, as these exploits could potentially result in credential theft.

31/01/2025
"Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04/24.10"

Step-by-Step Guide to Installing Kubernetes on Ubuntu 24.04

28/01/2025
BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

BGMI 3.7 Update mod (hack) apk is now available for download!

0
In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

0
BGMI 3.7 Update mod (hack) apk is now available for download! Check out the Golden Moon theme, explore the new RONDO map, and get all the details you need to know.

BGMI 3.7 Update mod (hack) apk is now available for download!

15/02/2025
In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

In their latest cyberattack, North Korean hackers are taking advantage of a PowerShell exploit to hijack devices.

12/02/2025
  • Disclaimer
  • Copyright
  • About Us
  • Privacy Policy for Netfest
  • Contact
  • Advertise

© 2025 JNews - Premium WordPress news & magazine theme by Jegtheme.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Home
  • News
  • Review
  • Apple
  • Applications
  • Computers
  • Gaming
  • Gear
    • Laptop
    • Camera
    • Smartphone
  • Microsoft
  • Smartphone

© 2025 JNews - Premium WordPress news & magazine theme by Jegtheme.