Mini Shai-Hulud Supply-Chain Malware - Potential IMDS Credential Harvesting
Detects Node.js or Bun processes making HTTP requests to AWS IMDS or ECS metadata endpoints, indicative of credential harvesting by the Mini Shai-Hulud malware.
Sigma
Detects Node.js or Bun processes making HTTP requests to AWS IMDS or ECS metadata endpoints, indicative of credential harvesting by the Mini Shai-Hulud malware.
Already have an account?