Sophisticated, Highly-Targeted Attacks Continue to Plague npm
Tags
| attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 29c312de-c814-4e4e-a73c-5bb8443b25c2 |
| Fingerprint | e804ba41e80d2288 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 12, 2023, midnight |
| Added to db | Aug. 12, 2023, 10:28 a.m. |
| Last updated | Nov. 17, 2024, 5:46 p.m. |
| Headline | Sophisticated, Highly-Targeted Attacks Continue to Plague npm |
| Title | Sophisticated, Highly-Targeted Attacks Continue to Plague npm |
| Detected Hints/Tags/Attributes | 42/1/38 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 46 | ✔ | Phylum | https://blog.phylum.io/rss/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Autonomous System Number | 1 | AS18779 |
|
| Details | Autonomous System Number | 15 | AS13335 |
|
| Details | Autonomous System Number | 25 | AS16509 |
|
| Details | Domain | 4 | array.prototype.slice.call |
|
| Details | Domain | 1 | cip.final |
|
| Details | Domain | 7 | axios.post |
|
| Details | Domain | 16 | response.data |
|
| Details | Domain | 1 | ql.rustdesk.net |
|
| Details | Domain | 1 | rustdesk.net |
|
| Details | Domain | 55 | live.com |
|
| Details | Domain | 2 | ns1.dyna-ns.net |
|
| Details | Domain | 2 | ns2.dyna-ns.net |
|
| Details | Domain | 295 | amazon.com |
|
| Details | Domain | 1 | ns1.dynadot.com |
|
| Details | Domain | 1 | ns2.dynadot.com |
|
| Details | 1 | phpfox@live.com |
||
| Details | File | 156 | package.json |
|
| Details | File | 174 | index.js |
|
| Details | File | 674 | node.js |
|
| Details | File | 59 | app.js |
|
| Details | File | 7 | os.tmp |
|
| Details | File | 1 | 'node_logs.txt |
|
| Details | File | 20 | response.dat |
|
| Details | File | 10 | os.pl |
|
| Details | File | 1 | node_logs.txt |
|
| Details | IPv4 | 1 | 62.234.32.226 |
|
| Details | IPv4 | 2 | 166.88.19.180 |
|
| Details | IPv4 | 1 | 52.8.134.32 |
|
| Details | IPv4 | 1 | 54.67.42.145 |
|
| Details | IPv4 | 1 | 54.67.93.101 |
|
| Details | IPv4 | 1 | 68.68.98.160 |
|
| Details | Url | 1 | https://ql.rustdesk.net |
|
| Details | Url | 1 | https://ql.rustdesk.net/api/index |
|
| Details | Url | 1 | http://ns1.dyna-ns.net |
|
| Details | Url | 1 | http://ns2.dyna-ns.net |
|
| Details | Url | 1 | http://amazon.com |
|
| Details | Url | 1 | http://ns1.dynadot.com |
|
| Details | Url | 1 | http://ns2.dynadot.com |