Trojanized Newtonsoft.Json Fork Exploits Game-Rigging Vulnerability in NuGet Package

A trojanized NuGet package named 'Newtonsoftt.Json.Net' was discovered, masquerading as a legitimate JSON library while rigging game results on Digitain. The malware remains undetected by most users, activating only when specific game-backend methods are initialized, and exfiltrates rigged data to a hardcoded server.

Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's designed to rig live game results on Digitain.

The package, named "Newtonsoftt.Json.Net," masquerades as the Newtonsoft.Json library and is a trojanized fork. Seven versions of the package have been published to the

Read original article