WeaselBiscuit
Named by 4 kept items in this workspace.
Search every workspace for WeaselBiscuit. It matches the name as written, so it can find other things that share it.
The items that name it 4
New, stripped-down, self-contained JavaScript malware family derived from BeaverTail and OtterCookie; found in 16 npm packages so far; has three stages, no RAT component, focuses on a keylogger and clipboard stealer for fast credential/info theft; attributed with ~90% confidence to DPRK by the podca
Newly identified lean infostealer found hiding in 11+ npm packages; stripped-down variant sharing behavioral overlap with BeaverTail/OtterCookie; tentatively attributed to DPRK as an analytic hypothesis, not confirmed.
New lean infostealer hiding in npm, suspected to be created by DPRK.
New malware discussed
All threat actors in this workspace.