Flutterby™! : xFileSyncerx

Red Team test code for a client infiltration on the Python Package Index: Reversing Labs: Python downloader highlights noise problem in open source threat detection

The purpose of these packages was to test the client’s SOC (security operations center) both in terms of their ability to detect the suspicious call out to retrieve the second and third stage malware, and to detect (if possible) the lateral movement conducted by S2.py as it found and infected systems using the hard coded SSH credentials, the person behind the d3duct1v account indicated.