Suspicious Deno File Written from Remote Source

SigmaHQ Detections@sigmaHQ

•updated May 27, 2025•0•32

Detects Deno writing a file from a direct HTTP(s) call to the AppData folder or introducing its own malicious DLL. This behavior may indicate an attempt to execute remotely hosted, potentially malicious files through Deno.