Sicoob

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

A malicious NuGet package, 'Sicoob.Sdk,' disguised as a C# SDK for Sicoob, Brazil's largest cooperative financial system, was discovered to be stealing client IDs and PFX certificates. This allowed unauthorized access to…