Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Fake Xeno Roblox Executor Delivers Java RAT Through Discord and Gaming Forums
Excerpt
A malware campaign is targeting Roblox players with a fake version of the Xeno script executor, a tool commonly used to run custom Roblox scripts. The malicious package is advertised as an “undetected” Xeno build. It is distributed through gaming forums, Discord communities, archives, and compromised accounts. Researchers at Bitdefender said the campaign uses a multi-stage Java-based infection chain designed to appear to be a normal Xeno installation. While victims believe…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 9930036e8f787674db39094e21413e77 | High | Score 59/100 | First seen |
| MD5 | 4bdaf7792e908f163ebef137854c571d | High | Score 59/100 | First seen |
IOC Relationship Graph
Building graph…