Hostile 93% go Download

gocommunity.io/orderedbtree v1.0.8

Slack C2, self-delete, obfuscation

Go C2 agent accepts a kill command and removes itselfGo Slack agent decrypts, drops, and executes received content

Also flagged by https://feeds.feedburner.com/TheHackersNews (Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry), https://www.aikido.dev/blog/rss.xml (Graphalgo campaign spreads to Terraform providers and Go Modules) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.