Axios Compromise Used Social Engineering Against a Lead Maintainer
Summary
The article reports that a lead Axios maintainer was tricked into installing a Remote Access Trojan after attackers impersonated a company founder using AI-generated likenesses, webpages, and profiles.
Key points
- The article reports that Axios was compromised in March after a lead maintainer installed a Remote Access Trojan.
- Attackers reportedly impersonated a company founder to target the maintainer.
- AI tools were used to create convincing likenesses, webpages, and profiles.
- The article says the library has about 100 million weekly downloads.
- A post-mortem by the maintainer is linked at hxxps://github[.]com/axios/axios/issues/10636.
Article Details
- Victim Organization
- Axios
- Incident Type
- Supply-chain compromise involving social engineering that tricked a lead maintainer into installing a Remote Access Trojan
- Operational Impact
- The Axios JavaScript library was compromised, undermining its supply-chain security.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed