Veille cybersecurite : Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Source : The Hacker News
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads.
According to Aikido, the list of Terraform providers and Go modules is below –
gocommunity-io/dockerd (222 downloads)
kreuzwenker/
Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.