← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Who Broke NPM? Malicious Packages Flood Leading to Denial of Service
WHITE pcarrillo 2023-04-18 Modified: 2023-05-07
10
IOCs
LOW VOLUME
npm
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (10)
All URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL http://230320051222585.btl.jbc75.shop/f/fsbm0320.exe — 2023-04-18
URL http://ji.ghwiwwff.com/m/oskg25 b4ea2b4b198552bd5507a504480d1efe41343c84c317de4ed44f571f608c8d47 2023-04-18
domain aapu.at — 2023-04-18
domain bebekmanti.com — 2023-04-18
domain beelowers.com — 2023-04-18
domain dusti.co — 2023-04-18
domain hugersi.com — 2023-04-18
domain iplis.ru — 2023-04-18
domain potunulit.org — 2023-04-18
domain zeronetworks.com — 2023-04-18
References (1)
↗ https://medium.com/checkmarx-security/who-broke-npm-malicious-packages-flood-leading-to-denial-of-service-77ac707ddbf1