ox.securityPublished
Shai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHub
By Moshe Siman Tov Bustan
Excerpt
Breaking News: TeamPCP has gone open source — and the copycats are already here. The group behind Shai-Hulud has leaked their own malware code to GitHub, and independent threat actors have already begun modifying it and expanding its reach. OX Security is actively tracking this as it unfolds.
TeamPCP has escalated. The group behind Shai-Hulud is now spreading not just their malware, but their own source code, using what appear to be compromised GitHub accounts.
Currently 2 repositories are active, but that number is growing as infections spread.
New repo…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ox.security on ox.security.
Mentioned in the excerpt
More from ox.security1
- Malware-Slop: Crypto Stealer Impersonating Polymarket Exposes Its Own Credentialsox.security · Published 12 Jul
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
