Kaspersky Links Axios Supply Chain Attack to BlueNoroff

https://www.itvoice.in/wp-content/uploads/2026/08/Copy-of-Redington-2026-08-17T130159.550.jpg

Researchers from Kaspersky’s Global Research and Analysis Team (GReAT) uncovered technical links between the headline-grabbing supply chain attack on Axios, one of the world’s most widely used JavaScript libraries, and previously documented campaigns associated with BlueNoroff, a financially motivated subgroup of the infamous Lazarus Group.

Axios is one of the most widely used JavaScript HTTP client libraries, with over 100 million weekly downloads on npm. In March 2026, attackers compromised the npm account of a lead Axios maintainer and used it to publish malicious versions of the package.

These versions introduced a hidden dependency called plain-crypto-js, which was not used by the library itself but executed during installation via a postinstall script. This dependency downloaded and deployed a cross-platform Remote Access Trojan targeting macOS, Windows, and Linux systems.

BlueNoroff is a financially motivated subgroup of the Lazarus Group, known for targeting financial institutions and cryptocurrency platforms. The group has a...

Copyright of this story solely belongs to itvoice.in. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/MB6pJa8ZzL8fom8JKMHzwV-1590-80.jpg

Quote of the day by Motorola's cell phone pioneer Martin Cooper: 'People want to talk to other people — not a house, or an office, or a car' — blueprinting the start of a new era of communications

The American engineer Mark Cooper is considered one of the leading pioneers of the wireless communications industry, envisioning a world in which people would communicate wherever they were and not from fixed locations. Without his work in the mid-20th century, the mobile communications industry would arguably be non-existent. Hello Moto