SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers
Two new malicious packages that are intended to install the remote access trojan SilentSync on Windows PCs have been found by cybersecurity experts in the Python Package Index (PyPI) repository.
Screen capture, file exfiltration, and remote command execution are all possible using SilentSync, according to Manisha Ramcharan Prajapati and Satyam Singh of Zscaler ThreatLabz. Additionally, SilentSync retrieves browser information from Chrome, Brave, Edge, and Firefox, including login credentials, history, autofill information, and cookies.
The packages listed below can no longer be downloaded from PyPI. CondeTGAPIS is the user that uploaded both of them.
sisaws (201 Downloads)
secmeasure (627 Downloads)
According to Zscaler, the package sisaws imitates the functionality of th...