Fallout in ruby, this week

What we caught this week while monitoring over 155,936,774 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

TODAY

Tue Sep 22 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmalware/appmetadata/buildmalwaremetadataobjectives/anti-staticobjectives/command-and-controlobjectives/persistenceobjectives/privilege-escalationobjectives+25 16h
pwn 0.5.744 ruby 1,114,862 installs 16 hours ago

Offensive security framework with evasion

elevation-control/sudoservice/systemd

YESTERDAY

Mon Sep 21 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/command-and-controlobjectives/discoveryobjectives/evasionobjectives/anti-staticobjectivesobjectives/supply-chainmetadata/package+11 1d
blockchain_wallet 0.0.6.gem.a1528c5f ruby ✓ 1 day ago

Crypto miner with persistence and C2

payload/encryptedpackage/rubygems
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories