Campaign · stale
Repeated static TTP
Correlated evidence: js_decode_then_exec:base64 / atob / fromcharcode decode paired with eval / new function in the same file — canonical obfuscated-loader pattern.
32 releases152 max score90 confidence
Member releases
Timeline
| Date (UTC) | Event |
|---|---|
| 2026-05-30 | stale_campaign |
| 2026-05-30 | score_increased |
| 2026-05-30 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | expanded_campaign |
| 2026-05-28 | new_campaign |