← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks - SentinelOne
WHITE eric.ford 2022-09-01 Modified: 2022-10-01
78
IOCs
HIGH VOLUME
A new threat actor focused on infostealing through a.NET assembly has launched a supply chain attack on open-source software PyPI, according to SentinelLabs and the PyPi Foundation.
actor/juiceledgermalware/juicestealer
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
JuiceStealer August JuiceLedger Robux
Indicators of Compromise (1 / 78 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL https://rblxdem.com/brace.hta — 2022-09-01
References (1)
↗ https://www.sentinelone.com/labs/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks/