Node.Js Inline Script Network Connection - Linux

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects inline Node.js scripts that establish network connections, which may indicate malicious activity such as data exfiltration or command-and-control communication. Attackers may use inline Node.js scripts to quickly execute code that interacts with the network without leaving a persistent file on disk.

2026-08-07 00:00:00

None

64ca9236-8081-4e33-ad1f-9c852ff4dc34

attack.execution attack.t1059.004 attack.command-and-control attack.t1071.001

Nextron Sigma feed only (private)