MALICIOUS (1) campaign cataloged at 2026-09-30(2).
- The campaign has clearly malicious intent, like infostealers.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2026-09-friendly-greeting-tools¶
The package contains obfuscated code to exfiltrate data from the environment, targeting primarily Snowflake databases and credentials to them. Some tracks suggest it may be part of a pentest.
Abuse categories¶
exfiltration_generic
Campaign uses exfiltration_generic.
obfuscation
Code uses obfuscation techniques to hide its true purpose.