Velkrypt Wire
Repositories posing as security utilities are being used to infect the people most likely to download them: researchers and defenders.
Researchers at QiAnXin's XLab found the implant in the server that runs CWP, a free panel widely used to manage Linux hosting boxes.
Retailers in several European countries reported refrigeration systems tampered with remotely. A separate attack on a French blood bank site did not affect blood products.
Manufacturer Videostrong planted the backdoor in set-top boxes and sold criminals access to the resulting network.