Rust-Based Info Stealers Abuse GitHub Codespaces
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID bb863f97-68d0-4d4f-8c04-4d1a7351aa49
Fingerprint de32a0d34ef70463
Analysis status DONE
Considered CTI value 0
Text language
Published May 19, 2023, midnight
Added to db Oct. 15, 2024, 10:03 p.m.
Last updated Nov. 17, 2024, 6:31 p.m.
Headline Rust-Based Info Stealers Abuse GitHub Codespaces
Title Rust-Based Info Stealers Abuse GitHub Codespaces
Detected Hints/Tags/Attributes 41/2/13
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_sg/research/23/e/rust-based-info-stealers-abuse-github-codespaces.html
Details Source https://www.trendmicro.com/en_my/research/23/e/rust-based-info-stealers-abuse-github-codespaces.html
Details Source https://www.trendmicro.com/en_in/research/23/e/rust-based-info-stealers-abuse-github-codespaces.html
Details Source https://www.trendmicro.com/en_nz/research/23/e/rust-based-info-stealers-abuse-github-codespaces.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 246 
mail.ru
Details Domain 5 
diagnostics.zip
Details Domain 26 
gofile.io
Details Domain 6 
api.gofile.io
Details Domain 3 
storex.gofile.io
Details Domain 20 
ifconfig.me
Details File 31 
cookies.txt
Details File 6 
cards.txt
Details File 21 
exodus.wallet
Details File 10 
tokens.txt
Details File 3 
%localappdata%\microsoft\security\discord tokens.txt
Details File 5 
diagnostics.zip
Details File 3 
%localappdata%\microsoft\diagnostics.zip