Mini Shai-Hulud
Software · ATTACK:enterprise:S9043
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S9043",
"title": "Mini Shai-Hulud",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S9043",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--7f211b2e-c008-4cac-9ea8-29bd7edd50a4",
"external_id": "S9043",
"domain": "enterprise",
"created": "2026-07-29T14:50:38.891Z",
"modified": "2026-07-31T02:40:12.281Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "FBI TeamPCP JUL 2026",
"url": "https://www.ic3.gov/CSA/2026/260702.pdf"
},
{
"source_name": "Flashpoint Mini Shai-Hulud MAY 2026",
"url": "https://flashpoint.io/blog/mini-shai-hulud-worm-new-era-ci-cd-exploitation/"
},
{
"source_name": "Hunt.io TeamPCP Toolkit MAY 2026",
"url": "https://hunt.io/blog/teampcp-python-toolkit-firescale-github-c2-takedown"
},
{
"source_name": "Wiz Mini Shai-Hulud MAY 2026",
"url": "https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised"
},
{
"source_name": "Trend Micro TeamPCP MAY 2026",
"url": "https://www.trendmicro.com/en_us/research/26/e/analyzing-teampcp-supply-chain-attacks.html"
},
{
"source_name": "Phoenix TeamPCP 20 MAY 2026",
"url": "https://phoenix.security/teampcp-github-breach-durabletask-pypi-supply-chain-wave-four-2026/"
}
]
}Explicit source assertions (56)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0449fd1f-35ee-4c99-ac63-716da2a2276d
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1567.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--06788ab7-de3d-4c3e-b91f-4d6db1df4fc6
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1543.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0be2f567-71b1-4cae-a357-25f9e2109b9c
Wiz Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1552.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--139f26c6-3cfd-45bb-8e0a-277474d951d0
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1554
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--159f5a62-ad01-481e-ba18-a70cd19fa40d
Flashpoint Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19ef17d1-a6d5-499d-a551-3692a87eb109
Flashpoint Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1003.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--22d9e88d-fbcc-4e5e-a253-9b74a573fbd2
Flashpoint Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1528
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--24bcb5b8-8416-490e-9b09-9b98cd2fb663
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1677
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--31e61f9e-a537-4e17-922d-bf84b6edb600
Flashpoint Mini Shai-Hulud MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1555.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--38d98c87-ed4f-433a-a4bb-17c46d621f09
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1552.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3cf857dc-8e89-487c-b339-68517594bfc7
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1053.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--43130352-f2d9-4a3f-8c9a-8ec46fce38d9
Flashpoint Mini Shai-Hulud MAY 2026 · Wiz Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1560
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--43b6c74f-57ee-4cf8-acf8-97cbaa85db38
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1543.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e9b6d8a-7992-4393-a3b7-dec2ae9403b3
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c316caa-ecd9-4185-bd42-16b16343d405
Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6308284a-ac28-4943-b15f-368da34c01aa
Hunt.io TeamPCP Toolkit MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6559a4c7-ab95-45dc-ba38-0fb1b85aaa63
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a42f1d8-238c-4705-9abc-d4f89778036b
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--70cbf260-4995-485e-8dc2-241bfc421b80
Hunt.io TeamPCP Toolkit MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1546.018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7765a421-d52f-4a25-bfad-0ea2217cfcd1
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1205
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ad7a5f3-8c10-4677-b0ce-f41fbb6f0306
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83874b9c-91ee-400d-bc46-529ad159e083
Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1649
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87096c2d-3bf1-41e7-8fd2-34f0860ac02e
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87df7d6c-1001-46a4-8daa-6880ae20bd04
Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--887d8582-e9a4-4058-a917-4dea8dc3ab8c
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1552.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--88c0ceb8-e3be-46ca-8f29-50aa03e6e844
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1550.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b85cccb-2dc7-43dc-bb52-12107aa9ce23
Flashpoint Mini Shai-Hulud MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1021.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8e08614b-46bb-4cf5-8f63-183711feff9e
Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1555.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--971e0f50-01f7-4403-b99e-94ed4cf65269
Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1087.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e96af6e-01a0-40b3-bb2c-14fe9ee81007
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1564.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a78fcd98-56d7-4ee6-81f0-52c72dd3a3db
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa4acffb-0b5c-48b3-b0c4-d321e6ae842d
Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae6af46e-ac3d-40dd-8733-0f5f8429b5ef
Flashpoint Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1609
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af573ba3-42c6-497b-8d1c-063a159a4eee
Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1090.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b0c535b5-f246-4bc4-980c-428a56e0bafc
Wiz Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1213.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b33f3a0e-d6ae-467c-8d4e-d92fc1bcfb86
Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b6e78cd0-4bf6-486a-8133-4d04c154e61a
Flashpoint Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc21fc79-4a67-46e8-b514-efb20e92b3f7
Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:G1056 → uses → ATTACK:enterprise:S9043
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--be256d56-71e5-45ba-8b8d-b68cd4138541
FBI TeamPCP JUL 2026 · Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1078.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c0dc2f42-32e5-40ab-a0b6-f259303834d6
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1485
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbca9348-6e7b-49bd-88f5-66b0ec02e5d0
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cceb2661-fec2-40be-9357-c3949b510e65
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d16e6d0b-b602-49dc-ac14-72b0355b6d5c
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1559
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3e1a3fd-c00a-47b5-9a51-29546f6519e3
Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d41bb3da-3b48-4289-b8d2-e5f8b78fa8a4
Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1059.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd9ec0eb-9560-4ec2-875c-e715bc7462a4
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e2f6a5e0-48d0-4984-8ed7-79d1919c6645
Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1195.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e71858de-cf0c-4fc7-a253-988344f94ad3
Flashpoint Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1102.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7e1d905-6777-4299-b7d7-3465d9eac294
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9d29d73-6a2e-4b06-81e0-4dd29467711b
Hunt.io TeamPCP Toolkit MAY 2026 · Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1614
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ec5967b6-9b98-432f-a08d-6b04687a4290
Hunt.io TeamPCP Toolkit MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1546
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--efc15678-c8f8-4225-98bb-f9d070e163fe
Flashpoint Mini Shai-Hulud MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1552.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f27818f1-c9f8-4ed4-8fef-9217e0dfe49b
Flashpoint Mini Shai-Hulud MAY 2026 · Hunt.io TeamPCP Toolkit MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1059.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8ca294b-b401-4bc3-897d-04ac9860fadb
Flashpoint Mini Shai-Hulud MAY 2026 · Trend Micro TeamPCP MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1059.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f99a0139-7ebe-487a-ae7d-d02c009dc61e
Wiz Mini Shai-Hulud MAY 2026 · Phoenix TeamPCP 20 MAY 2026ATTACK:enterprise:S9043 → uses → ATTACK:enterprise:T1497
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd10197b-dc82-46b8-b600-0abebdcaa8a5
Hunt.io TeamPCP Toolkit MAY 2026