Threat Intelligence / Actor / Unattributed (NuGet account 'bmrxntfj')

Unattributed (NuGet account 'bmrxntfj')

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: bmrxntfj, IR.* publisher

Tracked threats

Malicious NuGet Packages Impersonate Chinese UI Libraries — IR.* Infostealer With clrjit.dll JIT Hook, Reactor RSA-1024 Anti-Tamper, and Multi-Browser/Wallet/SSH Theft — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence