Rust Supply Chain Stage-2 Payload Execution (rust-setup)

Emiliano Mema@Nosalva

•updated Aug 28, 2026•0•0•3

Detects execution of a PowerShell script named 'rust-setup.ps1' or network connectivity to a specific external IP address (23.254.165.112:443) identified as a stage-2 payload delivery or command-and-control communication in a supply chain attack scenario.