The vpnMentor research team recently discovered an incident involving the popular stable diffusion user interface, ComfyUI, potentially putting at risk users who used a specific user-uploaded node. The custom node was reviewed by the vpnMentor team and the findings were confirmed.
This malicious code inserted in the “ComfyUI_LLMVISION” node is disguised as a helpful extension but is really designed to steal sensitive user information, including browser passwords, credit card details, and browsing history to later transmit the stolen data to a Discord server controlled by the attacker, posing direct privacy risks and many online threats to their users.
To understand more on how this malicious code works and how users can protect themselves you can find more information here: https://www.vpnmentor.com/news/comfyui-malicious-custom-node/
Related
This entry was posted on June 10, 2024 at 8:15 am and is filed under Commentary with tags VPNMentor. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
ComfyUI Users Targeted by Malicious Custom Node
The vpnMentor research team recently discovered an incident involving the popular stable diffusion user interface, ComfyUI, potentially putting at risk users who used a specific user-uploaded node. The custom node was reviewed by the vpnMentor team and the findings were confirmed.
This malicious code inserted in the “ComfyUI_LLMVISION” node is disguised as a helpful extension but is really designed to steal sensitive user information, including browser passwords, credit card details, and browsing history to later transmit the stolen data to a Discord server controlled by the attacker, posing direct privacy risks and many online threats to their users.
To understand more on how this malicious code works and how users can protect themselves you can find more information here: https://www.vpnmentor.com/news/comfyui-malicious-custom-node/
Share this:
Like this:
Related
This entry was posted on June 10, 2024 at 8:15 am and is filed under Commentary with tags VPNMentor. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.