Experts have found a trojan able to rig online live betting platforms
- JFrog found Newtonsoftt.Json.Net, a trojan NuGet package mimicking the popular Newtonsoft.Json library
- Malware specifically targeted Digitain’s crash‑game backend, rigging outcomes with insider knowledge of its codebase
- Issue was quickly fixed but attackers remain unidentified
Security researchers JFrog have discovered a unique trojan targeting one specific company, while letting everyone else who’s infected walk away unharmed.
Named Newtonsoftt.Json.Net, the trojan is a typosquatted NuGet package variant of the hugely popular JSON library called Newtonsoft.Json. The legitimate package is one of the most-used code libraries in the .NET programming world, needed by almost every project in existence. It is a small piece of software that helps .NET applications read, understand, and exchange data between different systems.
According to JFrog, someone published an almost identical package, copied the real author’s name, license, and made it work as intended. For almost anyone who installed it, it worked entirely normal. However, for developers working on...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
