As cited
Copy frozen at (site build).
threat intel
The Ultimate Validation: Making a Hacker’s “Do Not Engage” List
A malware researcher's name was embedded in the Celestial Stealer infostealer code as a kill-switch, causing the malware to shut down operations if the researcher's system is detected. This defensive measure reflects the researcher's visibility and threat to the malware operator's activities.
Why it matters: Security teams and threat researchers should understand that active researcher engagement can become a recognized threat vector to attackers, potentially triggering evasion or shutdown in malware operations targeting their organizations.
- Source published
- First seen by Cybersecurity Tracker