XWorm malware resurfaces with ransomware module, over 35 plugins

New versions of the XWorm backdoor are being distributed in phishing campaigns after the original developer, XCoder, ...
GitHub

Custom Auth Plugin Supports Basic Auth but Not Bearer Token (Realm Not Invoked for Bearer Tokens)

I developed a custom authentication plugin for Nexus 3, but it only intercepts Basic Auth requests. For Bearer Token (or other authentication methods), the realm seems to be ignored despite overriding ...