Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Fake Roblox Cheat Streams Victims’ Desktops Every 500 Milliseconds
Malware Families
Excerpt
A malicious campaign is targeting Roblox players with a fake “undetected” version of the Xeno script executor . Promoted through gaming forums and Discord communities, the installer appears to offer cheat features but instead delivers a Java-based information stealer and remote access trojan. Researchers found that the malware can capture screenshots every 500 milliseconds and send them to attacker-controlled servers, effectively creating a near-live desktop feed. It can also…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 9930036e8f787674db39094e21413e77 | High | Score 59/100 | First seen |
| MD5 | 4bdaf7792e908f163ebef137854c571d | High | Score 59/100 | First seen |
IOC Relationship Graph
Building graph…