THE EVOLUTIONARY TALE OF A PERSISTENT PYTHON THREAT

Summary from the TLDR InfoSec newsletter

The Checkmarx Software Supply Chain Security team has been tracking a threat actor that has been publishing malicious Python packages since April. The team has broken down the ways that the threat actor has gradually evolved their techniques from using plaintext payloads, to encrypting malicious functionality, and finally layers of obfuscation and evasion.