Tool
J2TEAM obfuscator
- First Reported
- Mar 15, 2026
- Latest Reported
- Mar 15, 2026
Reported Context (1)
- Analyst, which identified it as credential-stealing malware. The package is obfuscated with the J2TEAM obfuscator, which uses a rotating string array with hex references. We deobfuscated it by extracting the string StepSecurity Traces Malicious Polymarket Bot to Hijacked GitHub Organization
Malware (4)
MITRE ATT&CK (12)
Vendors (4)
Products (1)
Tools (2)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.