Synthèse
Microsoft Defender XDR customers can refer to the list of applicable detections below. Microsoft Defender XDR coordinates detection, prevention, investigation, and response across endpoints, identities, email, and apps to provide integrated protection against attacks like the threat discussed in this blog. TacticObserved activityMicrosoft Defender coverageInitial access / ExecutionCompromised packages published though GitHub Actions OIDC trusted publishingMicrosoft Defender Antivirus – Trojan:Sc
Microsoft Defender XDR customers can refer to the list of applicable detections below. Microsoft Defender XDR coordinates detection, prevention, investigation, and response across endpoints, identities, email, and apps to provide integrated protection against attacks like the threat discussed in this blog. TacticObserved activityMicrosoft Defender coverageInitial access / ExecutionCompromised packages published though GitHub Actions OIDC trusted publishingMicrosoft Defender Antivirus – Trojan:Script/Supychain. A – Trojan:JS/MiasmStealer. SC – Trojan:JS/SpawnLoader.
MKV! MTB Microsoft Defender for Endpoint – Suspicious Node. js process behavior – Suspicious Node. js script executionExecution / Defense evasionModule import triggers obfuscated main(), which spawns a hidden detached nodeMicrosoft Defender Antivirus – Trojan:JS/VaultLoader. MJZ!
MTB Microsoft Defender for Endpoint – Suspicious Node. js process behavior – Suspicious Node.