Found something interesting today about Bitbucket !!!!!
There you can read about what is going with Bitbucket.
Sounds like that they have the biggest malware cocktail on the planet.
Attack abusing Bitbucket serves potent malware cocktail to more than 500k users
An ongoing attack has so far delivered a cocktail of malicious wares to more than 500,000 users by abusing Bitbucket,
the source code management system operated by Atlassian, researchers reported on Wednesday.
The cocktail of malware includes:
Predator: Predator is an information stealer that steals credentials from browsers, uses the camera to take pictures, takes screenshots, and steals cryptocurrency wallets.
Azorult: Azorult is an information stealer that steals passwords, email credentials, cookies, browser history, IDs, cryptocurrencies, and has backdoor capabilities.
Evasive Monero Miner: The Evasive Monero Miner is the dropper for a multi-stage XMRig Miner that uses advanced evasion techniques to mine Monero and stay under the radar.
STOP Ransomware: The STOP Ransomware is used to ransom the file system and is based on an open source ransomware platform. It also has downloader capabilities that it uses to infect the system with additional malware.
Vidar: Vidar is an information stealer that steals Web browser cookies and history, digital wallets, two-factor authentication data, and takes screenshots.
Amadey bot: Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information on a target machine.
IntelRapid: IntelRapid is a cryptocurrency stealer that steals different types of cryptocurrency wallets.
You can read the whole article and source i has used here:
https://arstechnica.com/information-technology/2020/02/attackers-are-abusing-bitbucket-to-deliver-a-potent-cocktail-of-malware/
