Loading malware…
3 distinct techniques documented for this family, organized by ATT&CK tactic.
The repo advertises “over 100 ready-to-use security automation workflows” ... It has a README with a "Download" button. The download is a Lua-based trojan loader.
...execute obfuscated bytecode that contacts a Polygon blockchain RPC endpoint...
...execute obfuscated bytecode that contacts a Polygon blockchain RPC endpoint...
21 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.