Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
11 Malicious NuGet Packages Pose as Game Cheats to Deploy Windows Surveillance Malware
Excerpt
Socket’s Threat Research Team has uncovered 11 malicious NuGet packages masquerading as game cheats, bots, and “panels” that deliver a Windows surveillance-capable payload named pepesoft.exe. The packages were uploaded as .NET command-line tools, also known as DotnetTool packages. They target players of games including Albion Online, GTA5RP, GrandRP, Majestic RP, Lineage 2, Throne and Liberty, Russian Fishing 4, and others. Researchers reported the packages to NuGet and…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | 63e1e25e666fa2e5fe34219ab735cd0cf0b3a3a6 | Medium | Score 53/100 | First seen |
| SHA1 | 18887f9158bc827b1867286a5edcd25bb0eabafe | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…