Wiz

Shai-Hulud 2.0 Worm Affects Over One-Third of Fortune 100

First seen 30 Dec 2025, 23:42 UTC • Wiz

•65% similarity •33.2

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Shai-Hulud 2.0 worm has impacted over one-third of the Fortune 100 and numerous other organizations. Although primary containment was achieved in late November 2025, the worm persisted due to overlooked supply chain dependencies. This update provides insights into the persistence mechanics related to the incident.

ThreatCluster AI How this analysis works

Attack Flow

14 entities, 18 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Supply Chain Attack
Worm

Organization (2)

AWS
OpenVSX

Malware (1)

Shai-hulud

Affected Platform (5)

Trust Wallet
Artifactory
Chrome Web Store
Nexus
GitHub

Indicator (1)

2efa4dff59bc3d3cecdf897ccf178f99b115d63d

Tool (2)

Relationships

Shai-hulud communicates with 2efa4dff59bc3d3cecdf897ccf178f99b115d63d
Shai-hulud targets AWS
Shai-hulud targets OpenVSX
Data Breach targets Trust Wallet
Data Breach targets Artifactory
Data Breach targets Chrome Web Store
Data Breach targets Nexus
Supply Chain Attack targets Trust Wallet
Supply Chain Attack targets Artifactory
Supply Chain Attack targets Chrome Web Store
Supply Chain Attack targets Nexus
Worm targets Trust Wallet
Worm targets Artifactory
Worm targets Chrome Web Store
Worm targets Nexus
Shai-hulud related to GitHub
Shai-hulud related to Git
Shai-hulud related to Npm

Community

Browse all →

Tracked Entities in This Story

Shai-hulud AWS OpenVSX Trust Wallet Artifactory Chrome Web Store Nexus GitHub

Shai-Hulud 2.0 Worm Affects Over One-Third of Fortune 100

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story