Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware
Installers for three distinct software packages created by Conceptworld, an Indian company, have been compromised to disseminate malware that steals personal information.
The supply chain compromise was found on June 18, 2024, by cybersecurity firm Rapid7, and the installers match Notezilla, RecentX, and Copywhiz. As of June 24, Conceptworld had fixed the problem after a responsible 12-hour disclosure.
According to the firm, the installers were compromised to run malware that steals information and can download and run more payloads. The malicious versions of the installers were also found to have bigger file sizes than their authentic counterparts.
In particular, the virus can record keystrokes and clipboard contents, download and run additional payloads on compromised Windows P...
