You're listening to the Cyberwire Network, powered by N2K.

The IT world used to be simpler. You only had to secure and manage environments that you controlled.

Then came new technologies and new ways to work.

Now, employees, apps, and networks are everywhere.

This means poor visibility, security gaps, and added risk.

That's why Cloudflare created the first-ever connectivity cloud.

Visit cloudflare.com to protect your business everywhere you do business.

Hello everyone and welcome to the CyberWires Research Saturday.

I'm Dave Bittner, and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

Thanks for joining us.

Thank you. in a rapidly evolving cyberspace. Thanks for joining us. So in this case, the detection was triggered by a machine learning model,

and we have a review procedure of those detections

to see which are true positives

and determine what type of malware in this case we had.

That's Carlos Zanky, reverse engineer at reversing labs.

The research we're discussing today is titled

Malicious Pi-PI crypto pay package implants

info stealer code.

So you get that indication from the automation and what motivated your team to dig deeper into the package?

Well, in this case, we have a package we have previously seen to have clean versions.

So usually when we encounter most of the malware in public factory repositories,

...