#ParsedReport #CompletenessMedium
22-09-2026

Graphalgo campaign spreads to Terraform providers and Go Modules

https://www.aikido.dev/blog/graphalgo-terraform-go-modules

Report completeness: Medium

Actors/Campaigns:
Graphalgo

Threats:
Typosquatting_technique
Dead_drop_technique
Supply_chain_technique

Victims:
Go developers, Devops workstations, Terraform users, Software supply chain

ChatGPT TTPs:
do not use without manual check
T1027.009, T1027.013, T1036, T1036.005, T1041, T1059.007, T1070.004, T1071.001, T1082, T1102.001, have more...

IOCs:
Hash: 3
Url: 3
File: 6
Coin: 1
Domain: 2
IP: 0
Email: 0
BrowserExtension: 0

Soft:
Slack, Telegram, Linux, macOS

Crypto:
ethereum, arbitrum

Algorithms:
aes, zip, sha256

Functions:
_ddb43801486d, setCPubKey

Languages:
javascript

Platforms:
intel