sentinel-tool

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (5a2ff07802c4546c40d47d3780971506115297a1e8c177be36ad1e003dd62937)
The package installs a remote executable that uses a hardcoded Telegram channel for monitoring the user's activity, including regularly taking screenshots, and some remote control possibilities like switching the computer off and grabbing clipboard content. Some content suggests it was designed to be used by the uploader themself, but it poses the risk to anyone installing it.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-04-sentinel-tool


Reasons (based on the campaign):


 - Downloads and executes a remote executable.


 - spyware-like

Compromised versions (6)

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.