Campaign · active
Repeated static TTP
Correlated evidence: py_install_time_os_system:direct shell invocation via os.system / os.popen / os.exec*.
50 releases159 max score90 confidence
Member releases
Timeline
| Date (UTC) | Event |
|---|---|
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-03 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-02 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-06-01 | expanded_campaign |
| 2026-05-31 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-30 | expanded_campaign |
| 2026-05-27 | expanded_campaign |