2 ms·
We don't have a clear explanation of the destructive behavior, right? It looks like it had no real purpose, and there were much more effective ways of destroyin
by h1fra 10mo ago
We don't have a clear explanation of the destructive behavior, right? It looks like it had no real purpose, and there were much more effective ways of destroying their repos. Very script kiddie-like, which does not really fit the main complexity of the virus. Very surprising.
- n2d4 10mo agoIt hides the malware's trail, and disguises which keys were leaked, making rotation harder
- ack_inc 10mo agoThe socket.dev deconstruction of the worm (https://socket.dev/blog/shai-hulud-strikes-again-v2 https://socket.dev/blog/shai-hulud-strikes-again-v2) suggests that the destructive actions on GitHub were not part of the malware itself.