norosha
Attack Atlas

NRS-4090

Confirmed

Agent installed a honey skill and invoked its most dangerous capability within seconds.

Detection details

Model familyLlama
Fingerprint confidence91%
BaitHoney skill
Chain—
Observed addresscnry_k7txrlgz5g
Infrastructure regionCape Town, ZA
First seen24 Oct 2026, 21:25
Recommended action

Quarantine the skill bundle and rotate keys.

Evidence

Interaction logged against our decoy infrastructure. The address is described as observed interacting with bait — not as an accusation about any person.

Tailored to you

Get incidents like this for your own assets.

This is one detection from the public feed. Pro watches the wallets, contracts and sites you care about and alerts you — with the action to take — the moment a flagged agent touches them.