Anti-forensic self-deletion
Named by 4 kept items in this workspace.
Search every workspace for Anti-forensic self-deletion. It matches the name as written, so it can find other things that share it.
The items that name it 4
Ploutus malware included a self-delete function that erased all traces after cash was dispensed, hindering forensic detection
The final implant established a general-purpose remote shell and then deleted itself from disk upon execution, leaving no file-based forensic trace.
fs.rmSync(__filename, { force: true }) removes setup.cjs from the package tree immediately after execution to destroy the main forensic artifact
The dropper deletes itself after execution to reduce forensic traces
All techniques in this workspace.