Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Threat Intelligence｜From Python to Bun: Cross-Runtime Attack Chain Analysis of the Shai-Hulud Hades…
Excerpt
Threat Intelligence｜From Python to Bun: Cross-Runtime Attack Chain Analysis of the Shai-Hulud Hades Variant Background Recently, the PyPI ecosystem has seen two consecutive supply chain poisoning incidents leveraging Python wheel packages. Both incidents involved attackers publishing malicious Python packages and using .pth files to automatically trigger malicious code execution during Python interpreter startup. Related reports can be found in Shai-Hulud Descends to Hades:…
Read the original report →Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | d85f876a32f9b60370b107daddebf4911eec6caecd65db7a6aa870b11fd30cbf | Medium | Score 53/100 | First seen |
| SHA1 | 5f61956f8827a84977cd3501a4e1caea12b39bf5 | Medium | Score 53/100 | First seen |
| SHA256 | ce8ceb71a012b5d44e2241fb44fe269c6233f03f0586b15c833d4904cc30f3ba | Medium | Score 53/100 | First seen |
| MD5 | 372776448fcd2f38a937fd9de60625c0 | Medium | Score 53/100 | First seen |
| MD5 | 4154c95b4b96481cc85e89ac644f422a | Medium | Score 53/100 | First seen |
| SHA1 | 99249a99a1a7c705622d2cd1c55b93f0ccce0c99 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…