Node.Js Inline Script Network Connection

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects inline Node.js scripts that establish network connections, which may indicate malicious activity such as data exfiltration or command-and-control communication. Attackers may use inline Node.js scripts to quickly execute code that interacts with the network without leaving a persistent file on disk.

2026-08-07 00:00:00

None

1ff7ba21-e6a7-4603-beba-b70d28fb74e1

attack.execution attack.t1059.004 attack.command-and-control attack.t1071.001

Nextron Sigma feed only (private)