Poisoned Pipeline / Incidents / AS115
TXTBOOK dependency confusion against Tinkoff / T-Bank
CloudSEK tracks TXTBOOK: 993 public npm packages (after a PyPI start)
reconstructing Tinkoff / T-Bank internal names (BNPL, business banking,
analytics). The second-stage loader resolves the bank’s internal
artifact repository and proceeds only if it answers — so it runs inside
the target network. Delivery reassembles a Sliver implant from several
hundred DNS TXT records instead of an HTTP download.
Mapped techniques
- T0120 Dependency confusion
- T0109 Publish malicious artifact
- T0145 Bypass of outbound traffic control
- T0172 Runtime backdoor
- T0100 Discover naming conventions
supply-chain private-namespace confusion
993 packages matching T-Bank private names.
PyPI first, then npm at scale.
Implant delivered as DNS TXT records, not HTTP.
Sliver third stage.
Names reproduce T-Bank private package namespaces — recon of internal naming.