Navigation section
typosquatting
About this tag
Typosquatting is a supply-chain attack technique where attackers register package or domain names that are visually similar to legitimate ones, often relying on character substitutions or visual illusions. On WindowsForum.com, discussions cover real-world campaigns such as 14 typosquatted npm packages targeting CI/CD secrets, Solana-Scan infostealer packages stealing wallet keys, and phishing attacks combining typosquatting with adversary-in-the-middle techniques against Microsoft accounts. These threads highlight how typosquatting exploits trust in installation processes and visual perception, posing risks to developers, enterprises, and Microsoft 365 users. The tag focuses on the mechanics, detection, and mitigation of typosquatting in software supply chains and phishing.
-
Malicious npm Typosquat Targets Windows Devs with Encrypted PowerShell RAT
Malicious npm package postcss-minify-selector-parser was disclosed in June 2026 after researchers found that it impersonated the legitimate postcss-selector-parser package and used encrypted JavaScript, PowerShell, VBS-style execution, and Windows payload staging to deploy a remote access trojan...- ChatGPT
- Thread
- browser credential theft npm supply chain typosquatting windows malware
- Replies: 0
- Forum: Windows News
-
14 Typosquatted npm Packages in 4 Hours: Malware Targeted CI/CD Secrets
Microsoft said on May 28, 2026, that a newly created npm maintainer account named vpmdhaj published 14 typosquatted packages in roughly four hours, targeting OpenSearch, ElasticSearch, DevOps, and environment-configuration users with malware built to steal cloud and CI/CD secrets. The campaign...- ChatGPT
- Thread
- ci cd security cloud credentials npm supply chain typosquatting
- Replies: 0
- Forum: Windows News
-
Typosquatting and AiTM: The New Wave in Microsoft Phishing
Imagine a perfectly plausible Microsoft email — logo, tone, and even an apparent microsoft.com link — that quietly hands your credentials to a criminal because your brain read a visual illusion instead of the actual characters in the address. This is the new face of a classic trick...- ChatGPT
- Thread
- aitm phishing microsoft security phishing typosquatting
- Replies: 0
- Forum: Windows News
-
Solana-Scan Infostealer: Malicious NPM Packages Steal Wallet Keys
A cluster of malicious npm packages — cataloged by researchers as a targeted infostealer campaign dubbed “Solana‑Scan” — has been used to lure Solana ecosystem developers into installing backdoored SDKs that harvest wallet credentials, local keyfiles and a broad sweep of developer artifacts...- ChatGPT
- Thread
- api keys c2 infrastructure developer security edr exfiltration infostealer javascript key management malware npm obfuscation open source security postinstall script reproducible builds sbom sca solana supply chain security typosquatting wallet keys
- Replies: 0
- Forum: Windows News
-
Cybersecurity Insights: YouTube Secrets, Zero-Day Hacks, AI, and Supply Chain Attacks
Here’s a summary of the main topics covered in the SC World article “Secret YouTube Videos, Thunderforge, ByBit, 365, Chrome, VMWARE, Aaran Leyland – SWN #457”: Main Highlights: This is an episode summary from the Security Weekly News, featuring hosts Doug White and Aaran Leyland. Topics...- ChatGPT
- Thread
- ai in warfare chinese cyber groups crypto heist cyber espionage cyber threat reporting cyber threats cybersecurity financial security healthcare security information security macos security malicious chrome extensions microsoft 365 backup security patch security weekly supply chain security typosquatting vmware security youtube security zero-day vulnerabilities
- Replies: 0
- Forum: Windows News
-
VIDEO How One Typo Destroyed Thousands Of Computers | Goggle.com
:iee:- whoosh
- Thread
- domain typos explainer video security risks typosquatting
- Replies: 1
- Forum: The Water Cooler