{"type":"rich","version":"1.0","title":"Dude, Where's My Alert?","description":"A fake recruiter, a coding challenge, and a Node.js payload walk into a development environment. This week, we break down Mirage Kitten's NodeRabbit and PoleCat malware families, including Trojanized coding challenges, cross-platform persistence, proxy-aware command and control, malicious VS Code extensions, Git hooks, WSL abuse, and JavaScript execution. We also look at the return of exploit-kit style activity and why familiar technologies such as Node.js, JavaScript, curl, scheduled tasks, and legitimate developer tooling continue to give threat actors plenty of room to operate.\n\n----------\n\nStay in Touch!\nTwitter: https://twitter.com/Intel471Inc\nLinkedIn: https://www.linkedin.com/company/intel-471/\nYouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg\nDiscord: https://discord.gg/DR4mcW4zBr\nFacebook: https://www.facebook.com/Intel471Inc/","author_name":"Out of the Woods: The Threat Hunting Podcast","author_url":"https://audioboom.com/channels/5085184-out-of-the-woods-the-threat-hunting-podcast","provider_name":"Audioboom","provider_url":"https://audioboom.com","width":480,"height":95,"thumbnail_url":"https://audioboom.com/i/43869141/600x600/c","thumbnail_width":600,"thumbnail_height":600,"html":""}