Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
LiteLLM Compromised, Steals Credentials | Wiz Blog Wiz Platform Solutions Pricing Resources Customers Company Sign in Under attack? Get a demo Blog LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability. Benjamin Read , Rami McCarthy October 21,…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →22 indicators
IOC Relationship Graph
Building graph…