Attackers Are Hunting High-Impact Node.js Maintainers with Social Engineering(socket.dev)
3 pointsby pier256 hours ago1 comment
  • bedroom_jabroni6 hours ago
    Saw the axios post-mortem thread on X and it kept me wondering how the prompt to install an "updated SDK" appeared on the screen - does Zoom provide programmable interactions?

    I guess at the end of the day it's just a lookalike phishing link?

    • VoxPelli6 hours ago
      “it's just a lookalike phishing link”

      In a way, yes, but embedded in a thick thick layer of social engineering