#ParsedReport #CompletenessMedium
26-09-2026

PolinRider is A/B Testing its Way Past Your Detections

https://opensourcemalware.com/blog/polinrider-is-a-b-testing-its-way-past-your-detections

Report completeness: Medium

Actors/Campaigns:
Contagious_interview

Threats:
Polinrider
Nullreceiver_technique
Dead_drop_technique
Supply_chain_technique

Victims:
Binary mindz, Software developers

Geo:
North korea

ChatGPT TTPs:
do not use without manual check
T1027, T1027.001, T1027.013, T1059.007, T1102.001, T1105, T1195.002

IOCs:
Domain: 1
File: 15
Coin: 1
Url: 6
Hash: 6

Soft:
vscode, curl, vercel, linux, macOS

Wallets:
tron

Crypto:
ethereum, aptos, binance

Algorithms:
sha256, xor

Languages:
javascript, typescript

Links:
https://opensourcemalware.com/repository/https%3A%2F%2Fgithub.com%2FBinary-Mindz%2Fagimtula\_server
https://docs.github.com/en/rest/repos/repos#list-repository-activities