discovered 2026-05-28
RC4/XOR obfuscated MicrosoftSystem64 dropper published by jpeek895 cluster (May 20-21, 2026). Same dropper infrastructure as js-logger-pack. Attributed to DPRK Famous Chollima. OSV: MAL-2026-4198 / GHSA-h9jr-prgp-c322.
