Digital Warfare Podcast Daily Brief May 09, 2026

The Digital Warfare Podcast · May 9, 2026 · 4m

Summary

Researchers uncovered a new malware campaign called ZiChatBot, distributed through malicious Python packages on PyPI. The malware targets developers and DevOps environments while abusing legitimate Zulip REST APIs for command-and-control communications. Instead of relying on suspicious infrastructure, the malware hides inside normal SaaS traffic, making detection significantly harder. The campaign affected both Windows and Linux systems and demonstrated how attackers increasingly target software supply chains through developer ecosystems.

Key Takeaways

• ZiChatBot was distributed…