PolinRider

☆ pin

Reports

First seen

Jun 23, 2026

Last seen

Sep 23, 2026

Motivation

Financial, Espionage

Targeting

Sectors

Technology ×1

Top ATT&CK techniques

T1041 Exfiltration Over C2 Channel ×4T1105 Ingress Tool Transfer ×3T1082 System Information Discovery ×2T1195.001 Supply Chain Compromise: Compromise Software Dependencies and Development Tools ×2T1071.001 Application Layer Protocol: Web Protocols ×2T1027 Obfuscated Files or Information ×2T1555 Credentials from Password Stores ×2T1204.001 User Execution: Malicious Link ×2T1497 Virtualization/Sandbox Evasion ×1T1087 Account Discovery ×1T1219 Remote Access Software ×1T1059.001 PowerShell ×1

Indicators

filename ×8domain ×6ip_v4 ×3

Indicator values are available on Pro and via the API.

Recent reports

High

PolinRider

Targeting

Top ATT&CK techniques

Indicators

Recent reports

North Korean Threat Actors Distribute Go Malware via Malicious Terraform Providers and Packages

Malicious npm Packages Hide Malware in Runtime Code to Evade Install-Time Defenses

Two Compromised joyfill npm Packages Deliver DEV#POPPER RAT via Blockchain C2

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT