S4 Ep12: Dude, Where's My Alert?

Out of the Woods: The Threat Hunting Podcast · Oct 15, 2026 · 1h 1m

A fake recruiter, a coding challenge, and a Node.js payload walk into a development environment. This week, we break down Mirage Kitten's NodeRabbit and PoleCat malware families, including Trojanized coding challenges, cross-platform persistence, proxy-aware command and control, malicious VS Code extensions, Git hooks, WSL abuse, and JavaScript execution. We also look at the return of exploit-kit style activity and why familiar technologies such as Node.js, JavaScript, curl, scheduled tasks, and legitimate developer tooling continue to give threat actors plenty of room to operate. ----------…