Fallout in python, Sep 21 – Sep 27

obfuscated exec payload in setup

Process injection payload included

Remote command execution agent

Remote code execution via exec

Obfuscated payload execution

obfuscated exec, credential harvesting

Obfuscated .pth payload executes code

Obfuscated .pth auto-executes payload

Exfiltrates environment variables on install

Exfiltrates system info to webhook

Exfiltrates system info to webhook

Embedded malicious payload corpus

Embedded malicious sckit binaries

Exfiltrates credentials during build

Autonomous offensive security framework

Obfuscated base64/zlib exec payloads at import

Obfuscated base64 payload exec plus credential harvesting

Obfuscated exec payload, credential harvesting, bpoorman malware

Steals Telegram data, exfiltrates

curl-pipe-sh, credential theft, persistence

Exfiltrates screen capture to Discord