vulnerability-research ⁽²⁾

Raluca Gheorghita April 8, 2025

Cybercriminals Used PyPI to Distribute WooCommerce Carding Tool – 34,000 Installs

A malicious Python package named “disgrasya” has been discovered on Python Package Index (PyPI), used as a tool for credit card fraud. This package exploited the WooCommerce API to automate stolen card verification and reached over 34,000 downloads, highlighting a serious and widespread threat in…

Hack & Fix March 18, 2025

MirrorFace Expands Cyber Espionage Operations: New Targets and Tools Unveiled

In a significant development, cybersecurity researchers have uncovered that MirrorFace, a threat actor group linked to China, has broadened its cyber espionage activities beyond its traditional focus on Japan. Recent findings indicate that the group targeted a diplomatic organization in the European Union, marking a…