IronWorm Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
June 4, 2026
Last Seen
June 4, 2026

IronWorm is a malware family tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed June 4, 2026; most recent activity June 4, 2026.

Related Threat Clusters

  • Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

    A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

    697 articles · Updated April 29, 2026
  • Bots Surpass Human Traffic, Raising Cybersecurity Concerns

    For the first time in history, automated bots have overtaken human users in global internet traffic, with bots generating 57.5% of all HTTP requests. This shift, confirmed by Cloudflare data, occurred significantly…

    6 articles · Updated June 4, 2026

Recent Intelligence Reports

  • New IronWorm malware hits 36 packages in npm supply — Bleepingcomputer · June 4, 2026
  • SlowMist Discovers IronWorm Malware Targeting the Web3 Ecosystem via npm Packages — Kucoin · June 4, 2026
  • Slow Fog: The new Rust supply chain malicious activity IronWorm is attacking the Web3 ... — Weex · June 4, 2026
  • SlowMist Discovers IronWorm, a Rust supply chain malware targeting Web3 developers — Kucoin · June 4, 2026
  • Automated Bots Overtake Human Users in Global Internet Traffic for the First Time — Gbhackers · June 4, 2026

Related Entities

Credential Stuffing DDoS Malware Supply Chain Attack WEEX WXT Eco Carnival United States CWE-200 - Exposure of Sensitive Information CWE-798 - Use of Hard-coded Credentials Binding.gyp FlutterShell Shai Hulud T1003 - OS Credential Dumping

CVSS v3.1 Breakdown