Cyberhaven

Reported Context (1)

In December 2024 a consent-phishing email tricked a Cyberhaven developer into granting a malicious application access to the Chrome Web Store, bypassing multi-factor authentication; the attacker then published a How Developer Dependency Culture Became a Major Software Supply-Chain Attack Surface

CVE (3)

Malware (3)

People (2)

Threat Actors (3)

MITRE ATT&CK (2)

Vendors (3)

Products (8)

Tools (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.