Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Malicious Packagist Composer Themes Deploying iOS Spyware

Threat actors are distributing 13 malicious Composer themes via Packagist to compromise streaming websites and deploy a WebKit-to-kernel exploit chain against iOS visitors for data exfiltration and cryptocurrency wallet theft.

iOS +1 supply-chain mobile-malware web-security cryptocurrency-theft spyware
4t 2c 1i