2025 10-08-v0-utils-v999.999.999

Exfiltrates host info via preinstall

JavaScript accesses hostname near an OOB endpoint and HTTP requestSecurity research claim paired with exfiltration endpoint
SHA-2565cc79016ab95a1d3de61dc490c06a87cc549a0265ec96e034c7269b3e8c7ca4d

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.