Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
RedC2 AI-Powered Linux Malware Delivered Through Malicious npm Packages
Malware Families
Excerpt
Security researchers have uncovered a supply-chain campaign distributing a native Linux implant tied to RedC2, a commercial multi-OS command-and-control (C2) framework marketed on Hack Forums, through a cluster of trojanized npm packages that represent a growing threat in npm supply chain attacks . The findings come from TrendAI Research, which analyzed the packages and reverse-engineered the embedded implant, dubbed RedShell Linux. RedC2 AI-Powered Linux Malware Uses npm…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 4537b1189ce419f1a595cf47216c03f80e9170ce80dad8d9227a1e52f9cb3466 | High | Score 69/100 | First seen |
IOC Relationship Graph
Building graph…