First Known Targeted OSS Supply Chain Attacks Against the Banking Sector

The attackers employed deceptive tactics such as creating fake LinkedIn profiles to appear credible and using customized command and control (C2) centers for each target, exploiting legitimate services for illicit activities.