From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise CrowdStrike discusses how this activity was discovered, how the attack works, what the payload does, and how to defend.

This is a good write-up of the recent Trivy supply chain attack, really informative. Apparently TeamTCP "are currently extorting several multi-billion-dollar companies from which they've exfiltrated data."

#cyber #trivyattack #cybersecurity #malware #teamtcp
www.crowdstrike.com/en-us/blog/f...