This malware can never be taken down

@securedbycasco

4.7K followers · usually 2.5K views a post

Views

8.9K

Likes

208

Comments

5

Shares

9

Promoted product

—

Why it worked

The video effectively explains a complex cybersecurity threat in an accessible way, highlighting the unique challenges posed by blockchain technology for malware removal. The use of clear on-screen text and a relatable explanation makes the topic engaging and shareable.

Summary

The video explains how a recent malware attack on the open-source library Better-Auth is particularly concerning because the malicious code is hosted on a blockchain, making it extremely difficult to remove. Unlike previous attacks where platforms like GitHub could be asked to take down malicious code, blockchain's immutable and decentralized nature prevents such takedowns.

Free account

Transcript, structure and on-screen text

4 beats, a 192-word transcript and 3 lines of on-screen text — the parts you need to write your own version.

Create a free account to see the full breakdown

Original caption

This malware can never be taken down. A contributor tried to smuggle malicious code into Better-Auth, a popular open source JS library, through a legitimate-looking pull request. Once the merged code runs, it pulls its real payload from blockchain transactions. Unlike the Axios attack on GitHub, you can't file a takedown request against a blockchain. It's globally replicated across thousands of independent nodes and designed to be immutable. Watch the full breakdown at the link in bio. #cybersecurity #appsec #opensource #supplychainsecurity