First Open Source Software Supply Chain Attacks Targeting the Banking Sector

Open-source software supply chain attacks are posing significant threats to the banking sector. These attacks exploit vulnerabilities in the software supply chain, compromising the security of banks and their customers. Checkmarx, a leading cybersecurity company, has recently identified the first instances of such attacks, highlighting the need for heightened vigilance and robust security measures within the banking industry.

First Attack: Overview

In February 2023, the first attack targeting banks was initiated. Malicious actors uploaded a package to NPM, a popular repository for JavaScript packages. This attack served as a wake-up call to the banking sector, demonstrating the risks posed by vulnerabilities in the software supply chain.

First Attack: Payload Description

The package uploaded during the first attack contained a payload designed specifically to intercept login data. Once installed on a vulnerable system, the package would discreetly transmit the stolen login information to a remote location, enabling the attackers to gain unauthorized access to sensitive banking accounts.

Second Attack: Overview

Following the first attack, a similar attack pattern emerged in early April 2023. Once again, threat actors utilized the NPM platform to upload packages targeting the banking sector. This repetition reinforces the urgency for banks to fortify their software supply chain against such attacks.

Second Attack: Downloading Malicious Binary

To execute the second attack, the malicious actors employed encrypted files within the NPM packages. These files facilitated the download and installation of a malicious binary onto the victim’s system. Such malware presents a significant risk, as it may grant unauthorized access and control to the attackers.

Subdomain Creation for Evasion

To avoid detection and bypass traditional deny list methods, the attackers cleverly created a subdomain on Microsoft Azure CDN. By utilizing this subdomain, the attackers were able to disguise their activities, making it more challenging for security systems to identify and mitigate the threat promptly.

Utilization of the Havoc Framework

In their quest for comprehensive control, the attackers leveraged the Havoc Framework – an advanced post-exploitation command and control framework. This framework equipped the attackers with sophisticated tools and techniques, amplifying their ability to exploit vulnerabilities and inflict substantial damage within the compromised banking systems.

Checkmarx’s investigation into the attacks revealed a disturbing revelation—a link between the contributor behind the malicious packages and a fake LinkedIn profile. The fake profile masqueraded as an employee of the targeted bank, enabling the attacker to gain credibility and potentially deceive unsuspecting victims or bypass security measures.

The Ongoing Trend

Considering the severity and success of these attacks, Checkmarx predicts a persistent trend of attacks against the banking sector’s software supply chain. Threat actors are increasingly recognizing the potential rewards of exploiting vulnerabilities in this crucial sector. To safeguard against future attacks, banks must remain vigilant and prioritize robust security measures across their software supply chain.

The recent open source software supply chain attacks targeting the banking sector underline the need for heightened security practices within the industry. The identified attacks, which involved uploading malicious packages to NPM, demonstrated the ease with which threat actors can exploit vulnerabilities in the software supply chain. To protect themselves and their customers, banks must invest in comprehensive security measures, including rigorous code review processes, vulnerability assessments, and continuous monitoring. By remaining vigilant and proactive in defending against such attacks, the banking sector can ensure the integrity and security of their software supply chain.

Explore more

How Is AI Revolutionizing Email Marketing Strategies?

Setting the Stage for Digital Communication Evolution In today’s hyper-connected digital landscape, businesses send billions of emails daily, yet only a fraction capture attention amid overflowing inboxes, pushing marketers to seek innovative solutions. Artificial Intelligence (AI) has emerged as a game-changer in transforming email marketing from a generic broadcast tool into a precision-driven strategy. With the ability to analyze vast

How Is Embedded Finance Transforming UK Brand Experiences?

Imagine a world where purchasing a new gadget at a retail store instantly offers tailored financing options right at checkout, or where booking a vacation seamlessly includes travel insurance within the same app. This is the reality shaped by embedded finance, a transformative technology integrating financial services into non-financial platforms. As digital ecosystems continue to dominate consumer interactions in 2025,

Paid Content Marketing Triumphs in the AI Era over Earned Media

In the rapidly changing arena of digital marketing, a profound transformation is reshaping how brands connect with audiences, marking a significant shift in strategy. Once a dominant force, earned media—those organic news features or viral social media moments—has been dethroned as the go-to strategy for growth among businesses, musicians, and creators. Now, paid content marketing has surged to the forefront,

Job Openings Drop in July, Yet Hiring Remains Strong

Overview of the U.S. Labor Market In the heat of summer, as businesses and workers navigate an ever-shifting economic landscape, a striking statistic emerges from the U.S. labor market: job openings have dipped to 7.2 million in July, down from 7.4 million just a month prior, raising eyebrows especially when juxtaposed with the robust hiring figures of 5.3 million for

Trend Analysis: Cooling US Labor Market Dynamics

Introduction In a startling reflection of economic headwinds, US private sector job growth plummeted to a mere 54,000 in August, nearly half of the previous month’s tally of 106,000, signaling a profound slowdown in labor market momentum. This sharp decline arrives at a critical juncture, with economic uncertainty casting a long shadow, policy debates intensifying, and political figures like President