North Korean-Linked Polyfill Supply Chain Attack Affects 100,000 Websites

• •Approximately 100,000 websites affected by a supply chain attack linked to North Korea.
• •Attack initially attributed to China but later reassessed due to new evidence.
• •Exploitation of polyfill libraries allowed for injection of malicious code.

A significant supply chain attack has been linked to North Korean actors, impacting approximately 100,000 websites. Initially attributed to China, the incident was re-evaluated following the discovery of an infostealer infection. The attack exploited vulnerabilities in polyfill libraries, allowing attackers to inject malicious code into affected sites. The scope of the impact is extensive, with numerous organizations and users potentially exposed to data theft and further exploitation. The attack vector utilized compromised libraries that are widely used in web development. Security teams are currently assessing the damage and implementing measures to mitigate further risks. Ongoing investigations are focusing on the specific tools and methods employed by the attackers. As of now, remediation efforts are underway, but the full extent of the breach is still being determined.