Node.js: Old Technique Makes a Comeback

Reported 03 Sep 2026 by otx · Severity: medium

A resurgence in Node.js abuse has been observed since February 2026, targeting government departments, technology companies, and hotels. Attackers leverage the legitimate, signed node.exe binary to execute malicious JavaScript payloads, evading signature-based detection. In one i