6 ms·
If you access the domain that data was being sent to, h4ck.cfd, a message is given: >Hello, if you stumbled on this in your logs, then this is likely because y
by mmsc 4y ago
If you access the domain that data was being sent to, h4ck.cfd, a message is given:
>Hello, if you stumbled on this in your logs, then this is likely because your Python was misconfigured and was vulnerable to a dependency confusion attack. To identify companies that are vulnerable the script sends the metadata about the host (such as its hostname and current working directory) to me. After I've identified who is vulnerable and repoterted the finding all of the metadata about your server will be deleted.
I of course don't believe it, but interesting to see something like this.
- azeemba 4y agoIt's hard to take that message at face value. If one wanted to help find issues, one wouldn't actively collect secrets. Like maybe `/etc/resolv.conf` makes sense to identify parties but collecting all contents of `~/.ssh` can only be seen as malicious