norosha
Attack Atlas

NRS-4006

Confirmed

Agent retrieved a decoy document and acted on the poisoned instruction embedded in it.

Detection details

Model familyDeepSeek
Fingerprint confidence81%
BaitDecoy doc
Chain—
Observed addresscnry_tfp99q39m8
Infrastructure regionMumbai, IN
First seen31 Oct 2026, 05:33
Recommended action

Flag retrieval from this source and alert the owner.

Evidence

Interaction logged against our decoy infrastructure. The address is described as observed interacting with bait — not as an accusation about any person.

Tailored to you

Get incidents like this for your own assets.

This is one detection from the public feed. Pro watches the wallets, contracts and sites you care about and alerts you — with the action to take — the moment a flagged agent touches them.