hxxps://gist.github[.]com/q3k/af3d93b6a1f399de28fe194add452d01?permalink_comment_id=5006558#file-hashes-txt-L115URL

Reported by 1 independent source · first reported 5 Apr 2024 by Elastic Security Labs · last reported 5 Apr 2024

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“/* potential backdoor kill-switch as per hxxps://gist.github[.]com/q3k/af3d93b6a1f399de28fe194add452d01?permalink_comment_id=5006558#file-hashes-txt-L115 */”

Elastic Security LabsVendor5 Apr 2024
500ms to midnight: XZ A.K.A. liblzma backdoor

Indicators reported together

named in the same reports

process[.]pidin 1 report
process.parent[.]pidin 1 report
f1982d1db5aacd2d…ff66ec0f93abin 1 report
5448850cdc3a7ae4…0d2685db3049in 1 report

Copy these 4 indicators · defanged

4 indicators, defanged, one per line

process[.]pid
process.parent[.]pid
f1982d1db5aacd2d6b0b4c879f9f75d4413e0d43e58ea7de2b7dff66ec0f93ab
5448850cdc3a7ae41ff53b433c2adbd0ff492515012412ee63a40d2685db3049

Also named with it: CVE-2024-3094

Thanks — we review every report.

Report a wrong value