Turns out out of the 3 payloads (in this PR), the 1st and 3rd used a local IP (10.100.0.235:8000) as the C2 server, so they would have never worked. I haven't recovered the 2nd payload yet. This is amongst other silly stuff like 4 byte XOR keys for obfuscation and just blatantly disabling Electron sandboxing stuff without a good explanation.
Looking at the victim repos, it's kinda hard to see why Mythos would target this guy. AISI describes a coincidental email domain in DNS cache, which now we know is zohomail.com; that's not a very unique domain. I suppose we don't know it's original CTF task, but seems like another HuggingFace incident where the model makes very poor (broad?) judgements about how to get to the goal.
Comments
I found the original PR (thanks codex) and uh... IMO it's pretty underwhelming.
https:/github.com/w1b/aisi-mythos-inc-2026-07-28-01-recovered-pr
Turns out out of the 3 payloads (in this PR), the 1st and 3rd used a local IP (10.100.0.235:8000) as the C2 server, so they would have never worked. I haven't recovered the 2nd payload yet. This is amongst other silly stuff like 4 byte XOR keys for obfuscation and just blatantly disabling Electron sandboxing stuff without a good explanation. Looking at the victim repos, it's kinda hard to see why Mythos would target this guy. AISI describes a coincidental email domain in DNS cache, which now we know is zohomail.com; that's not a very unique domain. I suppose we don't know it's original CTF task, but seems like another HuggingFace incident where the model makes very poor (broad?) judgements about how to get to the goal.