The JavaScript Axios hack was so well coordinated #javascript #axios #hacker

Key Takeaways

This JavaScript library got hacked and it almost affected 100 million devices. Axios, one of the biggest JavaScript libraries, was hacked the other day and the attackers used how bad Microsoft Teams is to target the maintainers of Axios and plant malware. The guy that got his account compromised in here explained exactly what happened in here and how coordinated the attack was. So, they first reached out to him in here as like a company sponsorship or partnership. They invited him to like a very nice and real-looking Slack workspace. Then, they invited him to do a meeting on Microsoft Teams, which then he noticed when he joined the team in here that a message that said, "Oh, your system is out of date. You need to install something." Which, of course, he went ahead and did it because he thinks that Teams is bad as we all think. We have this idea about Microsoft Teams breaking all the time. And that's when a RAT was installed, like a Trojan, like a backdoor. And he explains as well that this was a very well-coordinated, legit thing. I mean, to get somebody as creator, maintainer or something like Axios, that takes a lot of work. And I'm starting to afraid for myself, honestly. And let's not forget that Axios has 95 million weekly downloads, which makes the attack so huge. So, if you're using Axios, go ahead and make sure you're pinning the version now.