Fake Roblox packages target npm with Luna Grabber info-stealing malware
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Models Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Software - T1592.002 Ssh - T1021.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 1116088f-3d80-4425-accd-1571bd030fd0 |
| Fingerprint | 844109198974ef6b |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Aug. 22, 2023, midnight |
| Added to db | Nov. 18, 2023, 11:42 p.m. |
| Last updated | Nov. 17, 2024, 12:59 p.m. |
| Headline | Fake Roblox packages target npm with Luna Grabber info-stealing malware |
| Title | Fake Roblox packages target npm with Luna Grabber info-stealing malware |
| Detected Hints/Tags/Attributes | 44/2/29 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 51 | ✔ | ReversingLabs Blog | https://blog.reversinglabs.com/blog/rss.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | luna.py |
|
| Details | File | 18 | noblox.js |
|
| Details | File | 674 | node.js |
|
| Details | File | 7 | postinstall.js |
|
| Details | File | 1 | luna.py |
|
| Details | sha1 | 1 | 6c5c33d7dc70e18287dff364dea6f75395f13d5e |
|
| Details | sha1 | 1 | f7fd66cca3d60db664f4495ac4247850820487d5 |
|
| Details | sha1 | 1 | ff0f7108b310818a05e5a2ddb929758c80f325b3 |
|
| Details | sha1 | 1 | 8e7208dca6c3be903fd9711522ac5e4c6292aae9 |
|
| Details | sha1 | 1 | f398b213ba8b53645a9e018b3c626f5af93e39ce |
|
| Details | sha1 | 1 | 13ddeea9d9ca03dffc3dbb28ecf57c1aa408b06e |
|
| Details | sha1 | 1 | a7521ed8c64a8ad0c7923b33a793493f3ef54ec8 |
|
| Details | sha1 | 1 | c505d9f99ef4628e345d18681126959352cfd612 |
|
| Details | sha1 | 1 | 421f5f6522afe0329847d0cd1cf0163f6c8c5430 |
|
| Details | sha1 | 1 | 21d368c68b40fc0a9f5403cc1d9160cd2326d8ee |
|
| Details | sha1 | 1 | 4f83a57e3e74698cdb5a7c15e17d396f68d3ac29 |
|
| Details | sha1 | 1 | 0c3fec3308d3f475b6343df7369835f120712a07 |
|
| Details | sha1 | 1 | 1ffc56b5b0bc1c5c845c78b7230d00877d5c57e4 |
|
| Details | sha1 | 1 | 06209e3806220cf453fbfa5f27d04c2c4c402007 |
|
| Details | sha1 | 1 | 35086a14a572a19884fb9b912fda619c6f01699c |
|
| Details | sha1 | 1 | 3a5e75a3d62c5e213798589d90fb696d791f6095 |
|
| Details | sha1 | 1 | f0d31b98e261b99bf12de9b800f8a931d672fa03 |
|
| Details | sha1 | 1 | fcd4ab5b8ddc002c71f1c9f8c5038a9a331a8716 |
|
| Details | sha1 | 1 | 968963b2950e4f8571a9ca84db69d6482335cfc1 |
|
| Details | sha1 | 1 | 21fa7478e0b7d5fc1752cdff9659095229fc0b1c |
|
| Details | sha1 | 1 | 28d0c86f9785efcc6c23e6b68690fe20070755ce |
|
| Details | sha1 | 1 | 23351a652d8e63853f724ad9f2a347f42bb1d7bb |
|
| Details | sha1 | 1 | 1fa91486601d02038bcb266b819d20c550a861ea |
|
| Details | sha1 | 1 | a94e7c7b429d2da3e319ad1384e48240539ac169 |