MALICIOUS (1) campaign cataloged at 2025-06-14(2).
- The campaign has clearly malicious intent, like infostealers.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2025-06-sorex¶
Clones of libraries to access Aminoapps (e.g. legitimate package amino.fix) with added exfiltration of the given credentials
Abuse categories¶
action-hidden-in-lib-usage
Campaign uses action-hidden-in-lib-usage.
clones_real_package
Campaign uses clones_real_package.
exfiltration_credentials
Campaign uses exfiltration_credentials.