Fallout, since Sep 21

Hidden PowerShell, VBS, and registry persistence

Active Directory attack toolkit

Dependency explicitly classified hostile

obfuscated multi-stage loader

Trojanized obfuscator with process execution

Clipboard exfiltration to hidden IP

Hostile dependency embedded

Exploit code with reverse shell

Embedded base64 shellcode in definitions

Minecraft credential stealer

WMI hidden process, obfuscated payload

Mythic C2 fields, hidden persistence

RAT features, C2, persistence, obfuscation

Installs MITM root CA, intercepts traffic

Browser automation for credential theft

CS2 cheat with hooks

Patches IDE main.js, injects code

obfuscated exec payload in setup

Patches IDE main.js, injects code

DevTools blocked, raw IP API

Routes all traffic to attacker proxy

Obfuscated PowerShell malware dropper

Wallet drainer with fake balances

Hidden process execution and obfuscation

Process injection payload included

Remote command execution agent

Typosquatted malicious dependency

Encoded PowerShell backdoor, C2, ransomware strings

Trojanized dependency rewrites host code

Dependency classified hostile, credential access

ASP web shell backdoor

ASP webshell backdoor

ASP web shell backdoor

Melissa virus macro

High-entropy binary, rapid release churn

Collection of RCE exploits

Collection of RCE exploit scripts

Academic dishonesty and anti-detection evasion

Keylogger exfiltrates via email

Shellcode execution via VirtualAlloc

typosquatted Docker CLI module

Remote code execution via exec

Obfuscated PowerShell malware

obfuscated VBScript execution

Keylogger exfiltrates via email

Search hijack, data exfiltration

Cookie theft and credential access

Steals cookies and tokens

Reverse shell with evasion

Installs hidden reverse shell