T1562.001

Impair Defenses: Disable or Modify Tools

discovered 2026-06-03

setup.cjs sets NODE_TLS_REJECT_UNAUTHORIZED=0 to disable TLS certificate verification for C2 over self-signed/expired certs.

View on MITRE ATT&CK

Seen in packages

Campaigns