Skip to content
Threat Feed
Subscribe

Tag

Typosquatting

2 briefs RSS
high advisory

Credential Harvesting via Lookalike WatchGuard VPN Download Sites

Threat actors are using typosquatted domains to harvest WatchGuard VPN credentials via fake portals before delivering legitimate software to maintain victim trust.

Mobile VPN with SSL phishing credential-harvesting typosquatting vpn watchguard
2t 2i
high advisory

Detection of Typosquatted Python Package Installation

A detection identifies suspicious installations of Python packages, leveraging Cisco NVM flow telemetry to monitor `pip` or `poetry` commands making outbound connections to public repositories for package names resembling known typosquats, indicating potential malicious software supply chain compromise.

typosquatting python package-manager supply-chain endpoint network cisco-nvm software-supply-chain-security
2r 2t