Testing latest malware dependency confusion attack against PyTorch, torchtriton

[gustavo-iniguez-goya]

pytorch.org:
"At around 4:40pm GMT on December 30 (Friday), we learned about a malicious dependency package (torchtriton) that was uploaded to the Python Package Index (PyPI) code repository with the same package name as the one we ship on the PyTorch nightly package index. Since the PyPI index takes precedence, this malicious package was being installed instead of the version from our official repository. This design enables somebody to register a package by the same name as one that exists in a third party index, and pip will install their version by default.

This malicious package has the same name torchtriton but added in code that uploads sensitive data from the machine."

pytorch-torchtriton-25122022.webm

h4ck.cfd domain is not active anymore, so that's why the malware only performs DNS requests.

• https://pytorch.org/blog/compromised-nightly-dependency/#how-to-check-if-your-python-environment-is-affected
• https://www.virustotal.com/gui/file/2385b29489cd9e35f92c072780f903ae2e517ed422eae67246ae50a5cc738a0e/behavior
• https://bazaar.abuse.ch/browse.php?search=md5%3A908596ffe11c30d1669431f3f4cb54f2
• https://blog.aquasec.com/pytorch-dependency-confusion-administered-malware