Campaign · active
Repeated static TTP
Correlated evidence: rs_build_time_command_combo:process spawn (std::process::command) paired with network / base64 / env-token read at build time.
33 releases192 max score90 confidence
Member releases
Timeline
| Date (UTC) | Event |
|---|---|
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-05-31 | expanded_campaign |
| 2026-05-31 | expanded_campaign |
| 2026-05-31 | expanded_campaign |