HIGHLY_SUSPICIOUS (1) campaign cataloged at 2025-04-04(2).
- Packages that are likely malicious, but due to the obfuscation level, lack of time or clear indicators it's hard to say what exactly they do; the highest risk of false positives.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2025-04-kql¶
Importing the module overwrite the default requests methods and stdout objects. Later usage of overwritten methods will modify provided data by adding comments to Telegram messages. No known usage
Abuse categories¶
iritating-computer-activity
Campaign uses iritating-computer-activity.