avatar

Matheus Moresco

@Lenderr
0 followers2 downloads3 copies0 likes176 views

1 detection

High-fidelity correlation detecting DPRK Contagious Trader npm malware persistence: Node.js process modifying authorized_keys followed by ufw allowing SSH. Targets cryptocurrency traders via poisoned GitHub trading bot repositories.
avatar
Matheus Moresco@Lenderr
Google SecOps
7 months ago
30176