PkgRadar

Campaign · active

Repeated static TTP

Correlated evidence: DNS / OAST exfiltration

54 releases209 max score90 confidence

First seen 2026-06-02 · last seen 2026-07-19

Member releases

Timeline

Date (UTC)Event
2026-06-29expanded_campaign
2026-06-27expanded_campaign
2026-06-25expanded_campaign
2026-06-25expanded_campaign
2026-06-24expanded_campaign
2026-06-22expanded_campaign
2026-06-22expanded_campaign
2026-06-22expanded_campaign
2026-06-21expanded_campaign
2026-06-21expanded_campaign
2026-06-21expanded_campaign
2026-06-20score_increased
2026-06-20score_increased
2026-06-18expanded_campaign
2026-06-18expanded_campaign
2026-06-18expanded_campaign
2026-06-18expanded_campaign
2026-06-18expanded_campaign
2026-06-18expanded_campaign
2026-06-18expanded_campaign

PkgRadar groups releases that share payloads, hashes, or publishers into campaigns and blocks them at the CI gate. Start free or see all live campaigns.

Repeated static TTP campaign — 54 releases | PkgRadar