Axios supply chain attack spreads remote access malware
The open-source library Axios was hijacked and used to distribute remote access malware targeting Mac, Windows and Linux. The attack was attributed to North Korea-linked hackers. AI deepfake lures and fake Microsoft Teams troubleshooting instructions were reportedly used to take over a maintainer's account.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Distribution of remote access malware targeting Mac, Windows and Linux
- Cause / method
- Maintainer account takeover via AI deepfake lures and fake Teams troubleshooting instructions, and supply chain attack on Axios
- Location
- Other countries
Timeline
- The distribution of remote access malware through the Axios supply chain was confirmed, and North Korea-linked hackers were named as being behind it.
- AI deepfake lures were reportedly used in the Axios hack.
- Fake Teams troubleshooting instructions were reportedly used to take over an Axios maintainer's account.
8 related reports
- 액시오스 공급망 공격 발생… 맥·윈도우·리눅스 모두 겨냥한 원격제어 악성코드 유포 환인
- North Korea-linked hack hits largely invisible software that powers online services
- North Korean hackers bug software used by thousands of US companies in potential crypto heist attempt
- North Korean hackers blamed for hijacking popular Axios open source project to spread malware
- Hackers hit axios, a hugely popular NPM library with 100M downloads: developers pulling trojans
- Axios Hack Traced to AI Deepfake Trap
- North Korea behind $286m Drift Protocol hack, investigators say
- Axios npm hack used fake Teams error fix to hijack maintainer account
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.