Rust-Based Info Stealers Abuse GitHub Codespaces
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID bec7c938-a073-4d0f-b508-4cea3a5541fc
Fingerprint de22a0820eb70463
Analysis status DONE
Considered CTI value 0
Text language
Published May 19, 2023, midnight
Added to db June 1, 2023, 10:58 a.m.
Last updated Nov. 17, 2024, 6:31 p.m.
Headline Rust-Based Info Stealers Abuse GitHub Codespaces
Title Rust-Based Info Stealers Abuse GitHub Codespaces
Detected Hints/Tags/Attributes 41/2/13
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/zh_hk/research/23/e/rust-based-info-stealers-abuse-github-codespaces.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 246 
mail.ru
Details Domain 5 
diagnostics.zip
Details Domain 26 
gofile.io
Details Domain 6 
api.gofile.io
Details Domain 3 
storex.gofile.io
Details Domain 20 
ifconfig.me
Details File 31 
cookies.txt
Details File 6 
cards.txt
Details File 21 
exodus.wallet
Details File 10 
tokens.txt
Details File 3 
%localappdata%\microsoft\security\discord tokens.txt
Details File 5 
diagnostics.zip
Details File 3 
%localappdata%\microsoft\diagnostics.zip