TI Mindmap HUB
Threat Intelligence Report

PolinRider Switches to Ethereum C2 in 30+ Repositories

๐Ÿ“… September 30, 2026 ๐Ÿ“ฐ safedep.io ๐Ÿ” 0 CVE(s) referenced

PolinRider compromised at least 35 GitHub repositories with build-triggered loaders that resolve rotating C2 servers through Ethereum transactions and deploy infostealers targeting developer secrets, browser credentials, cookies, and cryptocurrency wallets.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle