Trouble in Da Hood: Malicious Actors Use Infected PyPI Packages to Target Roblox Cheaters | Imperva
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Bypass User Account Control - T1548.002 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Bypass User Account Control - T1088 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID 16cb6458-e247-4dc2-8c8e-4fab4710ad95
Fingerprint b12199f98137a7d7
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 30, 2024, 11:22 p.m.
Added to db Oct. 1, 2024, 1:21 p.m.
Last updated Nov. 14, 2024, 7:58 p.m.
Headline Trouble in Da Hood: Malicious Actors Use Infected PyPI Packages to Target Roblox Cheaters
Title Trouble in Da Hood: Malicious Actors Use Infected PyPI Packages to Target Roblox Cheaters | Imperva
Detected Hints/Tags/Attributes 45/2/5
Source URLs
Redirection Url
Details Source https://www.imperva.com/blog/trouble-in-da-hood-malicious-actors-use-infected-pypi-packages-to-target-roblox-cheaters/?web_view=true
Details Redirection https://www.imperva.com/blog/trouble-in-da-hood-malicious-actors-use-infected-pypi-packages-to-target-roblox-cheaters/?&web_view=true
Details Source https://www.imperva.com/blog/trouble-in-da-hood-malicious-actors-use-infected-pypi-packages-to-target-roblox-cheaters/
URL Provider
Details Provider Source level domain
Details imperva.com www.imperva.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 99 ✔ Cyware News - Latest Cyber News https://cyware.com/allnews/feed 2024-08-30 22:08
Details 319 ✔ Blog https://www.imperva.com/blog//feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 88 
main.py
Details File 2 
zwerve.exe
Details File 2 
realtekhdaudiomanager.exe
Details File 76 
main.py
Details File 62 
fodhelper.exe