Contents may be malicious. [Research Saturday]

Unable to add items

Sorry, we're unable to add the item because your cart is already full.

Add to basket failed.

Please try again later

Add to wishlist failed.

Please try again later

Failed to remove from Wish List.

Please try again later

Adding to library failed

Please try again

Unable to follow podcast

Unable to unfollow podcast

Contents may be malicious. [Research Saturday]

Listen for free

View show details

Season's Savings | 0.99 €/month for 3 months

5.99 €/month thereafter - terms apply. Cancel monthly.

Adam Meyers, Head of Counter Adversary Operations at CrowdStrike, is discussing their work on "PhantomRaven, An LLM-Generated Information Stealer Developed for Bug Bounty Hunting." PhantomRaven, a JavaScript-based information stealer distributed through malicious npm packages by a financially motivated threat actor posing as a bug bounty hunter. The malware targets system information and continuous integration and continuous deployment (CI/CD) environment variables, likely seeking credentials, with analysis suggesting its code was generated using a large language model. The report explores how AI-generated tools may lower the barrier to cybercrime and outlines steps organizations can take to mitigate risks, including restricting package installation scripts, using private npm registries, and monitoring dependencies. The research and executive brief can be found here: PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting Learn more about your ad choices. Visit megaphone.fm/adchoices

No reviews yet