Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
About
Search posts and IOCs
sign in
Loading…
tmp.0987654321.lock · filename · cyfar.ca
indicator
filename
tmp.0987654321.lock
copy defanged
copy refanged (live)
First seen
2026-06-04
Last seen
2026-06-04
Sightings
1
Posts referencing this indicator
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
Socket
Lock file created by the malware to prevent duplicate running instances.
2026-06-04