Python Crypto Library Updated to Steal Private Keys

SUMMARY :

Phylum's automated risk detection platform discovered that the PyPI package aiocpa was updated to include malicious code that steals private keys by exfiltrating them through Telegram when users initialize the crypto library.

OPENCTI LABELS :

telegram,crypto,pypi,aiocpa


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


Python Crypto Library Updated to Steal Private Keys