Latest Account hijacking news

Hijacked maintainer account pushed two poisoned Axios versions to npm, delivering a cross-platform RAT to macOS, Windows, and Linux. The library has 100 million weekly downloads. Both versions have been removed, but anyone who installed them should assume full compromise.

A phishing campaign is hijacking Signal and WhatsApp accounts of officials and journalists by tricking them into sharing verification codes. Dutch intelligence confirmed victims among its own government employees and published detection indicators for compromised accounts.