Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Malicious Tensorlake npm Package Steals AWS Keys, SSH Credentials and Crypto Wallet Data
Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | iseekaigogo.com c2exfiltrationintel-blog | High | 58 | Oct 8, 26 |
| SHA1 | b614155fd88114d40549b259457bcf921df091b9 exfiltrationfile-hashintel-blog | Medium | 53 | Oct 8, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
DomainSHA1