info[.]pidDomain

Reported by 1 independent source · first reported 10 Sep 2026 by Palo Alto Unit 42 · last reported 10 Sep 2026

Last reported 1 month ago

What the reports say

1 report, newest first · the exact sentence from each

“…ect $(sudo crictl ps -a 2>/dev/null | awk '/Running/ && $0 ~ /(^|[[:space:]])workload-a([[:space:]]|$)/ {print $1}') 2>/dev/null | jq '.info[.]pid'”

Palo Alto Unit 42Vendor10 Sep 2026
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

named in the same reports

Copy these 2 indicators · defanged

2 indicators, defanged, one per line

40228af4d9a094f0fef2d7a303a3b6a689c4b4eba2fa9f7da5125b81d2d68ec8
7e1e73513947053f6ee40746fc498b1fb4f285cf175fa8336f08a38e209bda38

Thanks — we review every report.

Report a wrong value