Bitget production wallet job server
Named by 2 kept items in this workspace.
Search every workspace for Bitget production wallet job server. It matches the name as written, so it can find other things that share it.
The items that name it 2
Attacker moved laterally to this server after compromising third-party security appliances and deployed malicious packages, per Mandiant.
malicious packages deployed, used to execute fraudulent withdrawal commands
All technologies in this workspace.