fulcio.sigstore[.]devDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Shai-Hulud Campaign Evolution: Miasma, Hades, and AI Scanner Evasion“Those artifacts carried valid Sigstore (fulcio.sigstore[.]dev) provenance attestations, signed through the legitimate CI path and recorded in the Rekor transparency log.”
Indicators reported together
named in the same reports- npmjs[.]helpin 1 report
- scanning[.]inin 1 report
- dc48b09b2a5954f7…a923cb4c0efein 1 report
- e1342a80d4b5e83d…180c93a4b17din 1 report
- c539766062555d47…a668975e275cin 1 report
- models.litellm[.]cloudin 1 report
- hxxps://api.anthropic[.]com/v1/apiin 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.