Six malicious packages on PyPI, the Python Package Index, were found installing information-stealing and RAT (remote access trojan) malware while using Cloudflare Tunnel to bypass firewall restrictions for remote access.
Follow
@ecksmc
How can that be, when UK & US law enforcement also use Cloudflare tunnels to check secure line communications.
Its almost suggesting a suitable case would be to only have wallets on machines that are only used for payment purposes, but then hijacked websites & fake payment gateways so would not work either.
Hardware lock security devices like YubiKeys 2FA appear to be the only real answer, when you consider that cell phone 2FA can be SIM cloned.