T1090.002

Proxy: External Proxy

discovered 2026-07-14

8 PyArmor payloads reroute Google Sheets traffic through a hardcoded authenticated HTTP proxy (196.16.3.71:9528) when direct access fails.

View on MITRE ATT&CK

Campaigns