Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
Malware Families
Excerpt
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials | OpenSourceMalware BLOG WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials WeaselBiscuit is a lean new infostealer hiding in npm that we suspect was created by DPRK By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 · 2026-09-17T08:08:00.000Z The OpenSourceMalware team spends a lot of time looking at malicious npm packages, and after a while you start seeing the same patterns over and over. So when…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 7b15605f23b131b3eeea57e031ae7cb32fc4b78c7bbb2025aa7a561ea5ae5159 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…