> TritonInfoSec News
Home / Sep 25, 2026 / Story
0
#7 The Hacker News general September 23, 2026 at 18:06 UTC

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

By [email protected] (The Hacker News)

AI Summary

Researchers at Aikido discovered Go-based malware distributed through two Go modules and two malicious Terraform providers hosted on HashiCorp's official registry, marking the first confirmed use of the HashiCorp registry as a malware distribution vector. The providers identified include gocommunity-io/dockerd and kreuzwenker variants with measurable download counts. Security teams using Terraform or Go module dependencies should audit their supply chains and verify provider authenticity.

Read full article → https://thehackernews.com/2026/09/attackers-use-ma…

Relevance score: 80.0/100

# More from September 25

  1. 1
    There's a new way to break RSA that's faster than anything we've seen before Ars Technica Security
  2. 2
    Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure The Hacker News
  3. 3
    OpenAI hacked Australian Medicare govt site, probed data providers BleepingComputer
  4. 4
    CISA: Ransomware gangs now exploiting critical TeamCity flaw BleepingComputer
  5. 5
    Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges The Record
  6. 6
    Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content The Hacker News
  7. 8
    A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You The Hacker News
  8. 9
    Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer The Hacker News
  9. 10
    Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks The Record