Skip to content

Moika

Named by 5 kept items in this workspace.

4 items name it under threat actors and 1 under classification.key entities.

Search every workspace for Moika. It matches the name as written, so it can find other things that share it.

The items that name it 5

  • The OpenSourceMalware Show #16
    talkas threat actors2026-08-08

    Earlier campaign (discussed a couple months prior) believed to share tradecraft/attribution signals with WEL1DROPPER; Paul McCarty believes Moika is a genuine Russian campaign

  • Russian AI Slopsquatting Publishes 700+ Malicious NPM Packages
    writeupas threat actors2026-08-06

    Earlier npm malware campaign (April/May of this year) that published 250+ malicious npm packages; OpenSourceMalware suspects WEL1DROPPER may be an evolution of this campaign, sharing tradecraft such as use of the 'oob' string in file/server names, focus on Russian financial institutions and mobile p

  • OpenSourceMalware Blog
    articleas threat actors2026-07-18

    Gray-area campaign referenced alongside Miasma npm worm coverage.

  • The OpenSourceMalware Show #7
    talkas classification.key entities2026-06-03
  • Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
    articleas threat actors

    Earlier dependency confusion campaign (observed April 2026) that published over 250 npm packages to steal environment information and deliver an OS-specific second-stage payload; suspected precursor to the WEL1DROPPER campaign

All threat actors in this workspace.