T1497.003

Virtualization/Sandbox Evasion: Time Based Evasion

discovered 2026-07-07

Exfiltration deferred behind an ~11768 ms setTimeout so short-lived sandboxes tear down before the callback fires.

View on MITRE ATT&CK

Seen in packages