1
Anatomy of a Failed (Nation-State?) Attack
A fake-interview scam tried to backdoor my machine with PinpinRAT, hidden in a malicious TypeScript patch. Analysis of the attack, payload, and indicators of compromise.
Matt Mastracci — software developer. Blog posts on systems, programming, and tech experiments, plus open-source code projects and writing.
Visit grack.com → On Hacker News Nov 2010 – Jun 2026
Systems & Performance 1Society, Policy & Culture 1Security & Privacy 1Infrastructure & DevOps 1Hardware & Electronics 1Tech Industry & Business 1
A fake-interview scam tried to backdoor my machine with PinpinRAT, hidden in a malicious TypeScript patch. Analysis of the attack, payload, and indicators of compromise.