Tag: packetlab

1 Attack Reports | 0 Vulnerabilities

Attack reports

NodeJS backdoors delivering proxyware and monetization schemes

This report details a campaign involving NodeJS backdoors used to distribute proxyware and monetization schemes. The attackers employ Inno setup installers to drop PowerShell scripts that download and execute NodeJS packages with malicious JavaScript. The backdoors collect system information, commu…
backdoor
powershell
proxyware
browser extension
nodejs
honeygain
infatica
2025-09-24
packetlab
monetization
Published: September 24, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports