system-health-check-test-unique

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (10bfd6e986187675dd7d7e3a8f860807e408fd6a91694ca0e0128be83fa8fc47)
Importing the module exfiltrates content of /var/www/html to a remote host


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2025-12-system-health-check-test-unique


Reasons (based on the campaign):


 - files-exfiltration


 - obfuscation

Compromised versions (13)

• 0.3.6
• 0.3.5
• 0.3.4
• 0.3.3
• 0.3.2
• 0.3.1
• 0.3.0
• 0.2.9
• 0.2.8
• 0.2.7
• 0.2.6
• 0.1.6
• 0.1.5

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.