Fallout in go, this week

What we caught this week while monitoring over 155,936,774 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

TODAY

Tue Sep 22 · 23 catches · 0 waves · 3 singles
objectives/anti-analysisobjectiveswell-known/Mcwell-knownmicro-behaviors/cryptomicro-behaviorsmetadata/binarymetadataobjectives/anti-staticobjectives/collectionthird_party+31 6h
github.com/BC-Security/empire v5.6.4+incompatible go 6 hours ago

Empire C2 framework

Invoke/SshcommandContent/Indicator
objectives/discoveryobjectivesmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/executionobjectives/anti-staticmalwaremalware/toolsthird_party+12 9h
github.com/gdssecurity/PSAttack v0.2.2-beta go 9 hours ago

Known offensive security toolkit

Attack/Scriptsoffensive/mimikatz

YESTERDAY

Mon Sep 21 · 59 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/importobjectives/executionmicro-behaviors/datamicro-behaviors/cryptomicro-behaviors/fsobjectives/lateral-movementobjectives/command-and-controlobjectives+2 18h
github.com/chybeta/cmspoc…0180302064000-64f927be2a46 go 18 hours ago

Webshell deployment exploit toolkit

webshell/embeddedexploit/scanner
micro-behaviors/datamicro-behaviorsmetadatametadata/packageobjectives/evasionobjectives/anti-staticobjectives/executionobjectives/impactobjectives/command-and-controlobjectivesthird_party+4 18h
github.com/moham3driahi/x…0231008214525-4387bcd4e0ab go 18 hours ago

Webshell and WordPress exploit kit

PHP/Writerwebshell/file-manager
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/executionmicro-behaviors/datamicro-behaviors/cryptomicro-behaviors/fsobjectives/lateral-movementobjectives/command-and-controlobjectives+3 18h
github.com/CHYbeta/cmsPoc…0180302064000-64f927be2a46 go 18 hours ago

CMS exploit toolkit

webshell/embeddedexploit/scanner
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories