PyPI, the default platform for Python's package management tools, is warning users of a fresh phishing campaign.
“If you have already clicked on the link and provided your credentials, we recommend changing your password on PyPI ...
The attackers used process hollowing against RegAsm.exe, patched Windows defenses such as AMSI and ETW and unpacked further ...