logo

New tool blocks imposter attacks disguised as safe commands

ID: 0b77de00-1388-524a-abdb-73639edb6f46

STIX ID: report--0b77de00-1388-524a-abdb-73639edb6f46

Feed Name: Bleeping Computer

Date Published: 2026-02-08

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

Tirith is a new open-source, cross-platform tool that hooks into shells (zsh, bash, fish, PowerShell) to analyze pasted commands and block risky patterns—including Unicode homograph URLs, ANSI/bidi/zero‑width injections, pipe‑to‑shell downloads, dotfile hijacking, insecure transport, supply‑chain pitfalls, and credential exposure—performing fast, local analysis without telemetry; it supports Windows, Linux, and macOS via common package managers but does not integrate with Windows cmd.exe.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.