This case study analyzes the real-world operational and economic impact of infrastructure cyberattacks within the emerging digital ecosystem of Nepal. It serves as an architectural teardown of how an isolated DataCenter compromise can immediately trigger a national capital market halt and subsequent consumer data crisis. 📋 Executive Summary Target Infrastructure Node: DataHub Pvt. Ltd. (Nepal's premier private-sector Class-A, carrier-neutral Tier-3 data center provider). Incident Timeline: Phase 1 (Infrastructure Ransomware): Detonated on September 20, 2026, at approximately 4:00 AM – 5:30 AM NPT. Phase 2 (Exfiltrated Data Leak): Surfaced on dark web marketplaces on October 9, 2026. Primary Attack Vectors: Ransomware encryption of primary enterprise host systems at the physical facility, coupled with lateral movement to compromise interconnected hot-cloud backup repositories. Impacted Ecosystem Entities: The Nepal Stock Exchange (NEPSE) , SEBON, 72 commercial stock brokerage ...

Security researchers at OX Security, SafeDep, and Xygeni have uncovered a widespread supply-chain campaign dubbed PhantomSub. Attackers published at least 101 malicious software packages to the official npm registry—downloaded nearly 500,000 times. These packages trick developers into connecting their personal or business WhatsApp accounts (usually to build automated chatbots) and then secretly force those accounts to join WhatsApp channels, enter group chats, and broadcast unauthorized marketing links without the owner's knowledge or consent. Clear Explanation: How the Attack Works Developers often build WhatsApp automation tools or chatbots using an open-source library named Baileys. Attackers created deceptive copies (typosquatting and forks) of this original library, such as @nexustechpro/baileys or ourin-baileys. When a developer installs one of these malicious packages and scans the QR code to authenticate their WhatsApp session, the package acts normally on the surface. Howe...