Cybersecurity experts have identified new threats involving supply chain attacks and malware campaigns. Attackers are exploiting the NuGet package manager by creating fake packages, such as “Nethereum.All.” The malware appears to be popular through artificially inflated download counts. These packages contain malicious code designed to steal sensitive information, like cryptocurrency wallet keys. It does so by replacing characters in package names to evade detection. Meanwhile, the Russian hacking group Star Blizzard continues to adapt its tactics after the exposure of its LostKeys malware. They now deploy newer malware tools, such as NoRobot and MaybeRobot. The new tools are designed to trick victims into downloading malicious files that grant attackers control over infected systems. The group regularly updates its methods by changing file names, infrastructure, and techniques. By doing so, they try to avoid detection and sustain their cyber-espionage efforts. CTIX analysts will continue to report on the latest malware strains and attack methodologies.