Campaign · active
Repeated static TTP
Correlated evidence: py_install_time_base64_decode:base64/hex decode combined with exec/subprocess — classic obfuscated payload pattern.
77 releases255 max score81 confidence
Member releases
Timeline
| Date (UTC) | Event |
|---|---|
| 2026-06-15 | new_campaign |