Indicators of Compromise

copilot-instructions.md

Tracking Shai-Hulud: Inside the ChainDrop NPM Worm

0562c588997fa9961d55c6ab1db2656344324bca8db9ea7b64fe309132b2399f

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

f2a5f6ad71f4c1dd1acd5dd003fc362516e36287

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

b42cfc33c90e2f2666e6a347969fea05ed09cae7

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

7530ac13140d3794ad5a6680ee88ff756c44717b

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

12529884496d55a7a9aa96765af4ea4257499fec

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

bfb25270df49bb391193a59281d5ffcf

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3d393f2bdb67d15602a96a1496a82942

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

14477fd8ce26e5251dddf34a003364bc

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

1289b528f53c4b94f51a151ab1422797

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

c1b0f0243c5898161ac71ebaead265460d2e4077

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3e9720f33a958795f9744517cde035c27f8d3764

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3aa2b2eacd07b23285baee2aad757c7094955bbf

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

8dcb875c657f72e446d1ea88a1e8d82c

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

31c4eeb36c12d0784be6e21ee40a2b60

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

1db08732a7f63ba3487b10f7c13ebaaf

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

bb81786286be437b3ec6d562055767097c9277054e1d09172caa96376451481c

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

744b8165b6161cbd1d5ecc423ecfdb8306485afdc80262000ab3c6908881ef9e

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

2922837a8d049bf0b51f0f9b27340a377b27dd1912675e2cd82056db83ec7a19

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3b9b86feb3b789dda9cdfe5425ccb7e1feae9fde2cc158ff962991218a98f53f

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3466c3524f13cb3b7c87819e619bdb482ec9034a57bcdbe0240af6a9a530b02a

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

3d4e7187f74de912f9d52f5ba6a95bd41868348b16583d72957d732c0ed8f0e7

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

5b71b49bad415643ff3e291ee3ba550e5edfd584eb913859dadb81634450e7e7

CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

yangdiet.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

dogesgroom.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

karenheil.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

merindashop.cyou

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

coffeecincup.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

accordtrucking.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

bigblower.click

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

grovalstandard.monster

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

remoteshcontrol.com

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

dtc.victorramarisimobiliaria.com.br

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

web-safe.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

web-protection.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

webflare.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

nslsconscloud.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

bootstrup-cdn-ns.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

letsgomakemoneyoncaptcha.beer

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

http://158.94.208.104/x7GkP2mQ9zL4/my_s.bin

How the ErrTraffic Malware Campaign Uses ClickFix and EtherHiding

cfd101963a4e791fc59bda97bfc87f33ce7ce379

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

b51a50ffc57565c8488cb8101252db0e60619750

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

326a4305420a5c57950a7ee8c1e41b31132dd027

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

cd8b231a2101c7de3f0b118f99279cbd

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

66575cc1df33e40a47fe00abdc067fe5

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

1ef50e9d715245e29220936a66c0bece

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

rpc.poolz.finance

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

rpc.polygonsupernet.public.arianee.net

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

rpc.polygon-zkevm.gateway.fm

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications

polygontestapi.terminet.io

The Permanent Threat: Analyzing Blockchain-Based C2 Operations and Communications