Attackers Repurposing existing Python-based Malware for Distribution on NPM
Tags
| attack-pattern: | Credentials - T1589.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 12586337-6cf8-487f-b46d-9b65d39fc6db |
| Fingerprint | 822537efe804b601 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | April 1, 2044, midnight |
| Added to db | April 19, 2023, 5:16 p.m. |
| Last updated | Nov. 17, 2024, 6:45 p.m. |
| Headline | Attackers Repurposing existing Python-based Malware for Distribution on NPM |
| Title | Attackers Repurposing existing Python-based Malware for Distribution on NPM |
| Detected Hints/Tags/Attributes | 27/1/13 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 506 | ✔ | — | https://blog.phylum.io/rss.xml | 2024-08-31 10:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | styles.py |
|
| Details | Domain | 4 | discord.py |
|
| Details | Domain | 2 | colors.red |
|
| Details | File | 1 | styles.py |
|
| Details | File | 156 | package.json |
|
| Details | File | 144 | requirements.txt |
|
| Details | File | 7 | postinstall.js |
|
| Details | File | 1 | x20discord.py |
|
| Details | File | 4 | discord.py |
|
| Details | File | 1 | spawn.js |
|
| Details | File | 12 | preinstall.js |
|
| Details | File | 174 | index.js |
|
| Details | File | 674 | node.js |