Observatory

What the wider world is reporting — polled hourly, stored here, and always linked back to whoever said it.

updated just now

Feeds

200 indicators · 200 reportslast synced 54m ago

Everything CISA KEV Feodo Tracker HIBP NVD Leak sites ThreatFox URLhaus

CISA KEV: answered 54m ago; Vulnerabilities CISA has observed being exploited in the wild
Feodo Tracker: answered 54m ago; Botnet command-and-control servers abuse.ch observes answering right now — Emotet, QakBot, Dridex
HIBP: answered 54m ago; Data breaches disclosed and loaded into Have I Been Pwned
NVD: answered 54m ago; CVEs newly published to the National Vulnerability Database. A disclosure, not an exploit — most arrive before NVD has analysed them, and stay reported until it has
Leak sites: answered 54m ago; Victims a ransomware group has publicly claimed, tracked by ransomware.live. The claim is the attacker's — most victims never confirm it.
ThreatFox: answered 54m ago; Indicators abuse.ch ties to a named malware family
URLhaus: answered 54m ago; URLs submitted to abuse.ch as distributing malware

Today

125 entries

55m agocorroboratedwarningThreatFoxurl:hxxps://ez[.]ajuna88[.]org/zy/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
55m agocorroboratedwarningThreatFoxdomain:bossbeyavrupa[.]store
ClearFake indicator: domain
payload_delivery for ClearFake, reported by threatcat_ch at 100% confidence.
malware
ClearFake
tags
ClearFake
read the advisory ↗
59m agocorroboratedwarningThreatFoxsha256_hash:23746b451646aeaec0e56f813c7654fd75cb3c5a6d7c0e75fcda66c6287e5df2
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nuyar
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://ez[.]ajuna88[.]org/xi/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agocorroboratedwarningThreatFoxsha256_hash:54c7ebe70c5981d14bda4f2ed99adbac28fcf390e4ddd0e0f272dd893f6caa1b
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, haven, macOS
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://ez[.]ajuna88[.]org/roe/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agoreportedinfoThreatFoxdomain:kodyxyju[.]workers[.]dev
php[.]shin_webshell indicator: domain
payload_delivery for php[.]shin_webshell, reported by xscon at 50% confidence.
malware
php[.]shin_webshell
tags
Cloudflare, gif, PHP, webshell, WordPress, workers[.]dev, wp-admin
read the advisory ↗
1h agocorroboratedwarningThreatFoxsha256_hash:85279394e95efea3d2678c9561021cb4a9f7a4d88dbafc74668ee918fff0fd0a
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://ez[.]ajuna88[.]org/f1/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agocorroboratedwarningThreatFoxsha256_hash:69092c70e390ba31429d4bbd08ca01eef3415e665551d3d3a66b673f36ed48d3
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://ez[.]ajuna88[.]org/sa/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agoreportedwarningThreatFoxip:port:154[.]91[.]54[.]173:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
1h agoreportedwarningThreatFoxip:port:154[.]91[.]54[.]169:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
1h agoreportedwarningThreatFoxip:port:154[.]91[.]54[.]165:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
1h agoreportedwarningThreatFoxip:port:154[.]91[.]54[.]163:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
1h agoreportedwarningThreatFoxip:port:154[.]91[.]53[.]182:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
1h agoreportedwarningThreatFoxurl:hxxps://xn--71-6kcajl7b5a2b[.]xn--p1ai/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/g3/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://s4[.]bb69[.]org/p/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agocorroboratedwarningThreatFoxsha256_hash:be70832f18593e14e7e205abcb995ca2d030217a7cc6f6a37032b2c5d804aaea
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, quill
read the advisory ↗
1h agoreportedwarningThreatFoxsha256_hash:0fdd8680eee1762610d47515ace7b74b3ee715e93e5d1fbaecfa5b248fd1e187
Formbook indicator: sha256_hash
payload for Formbook, reported by Tuxxin at 90% confidence.
malware
Formbook
tags
Formbook, ps1
read the advisory ↗
1h agoreportedwarningThreatFoxsha256_hash:f51df4b117f65f70272204d7eb4f7b15caa495fd777ba7701884ad35ec2f07b3
Formbook indicator: sha256_hash
payload for Formbook, reported by Tuxxin at 90% confidence.
malware
Formbook
tags
Formbook, ps1
read the advisory ↗
1h agoreportedwarningThreatFoxsha256_hash:d75741349f4de1917c9d22ac48d95636290c04856c5facaccd6e2a128b47c6ee
Mirai indicator: sha256_hash
payload for Mirai, reported by Tuxxin at 90% confidence.
malware
Mirai
tags
Mirai, Sh
read the advisory ↗
1h agoreportedwarningThreatFoxsha256_hash:782cdb174d91a2c9116c077cdb4f23c3280c617ad352f169f97f221dd8a5fbd8
Overlord RAT indicator: sha256_hash
payload for Overlord RAT, reported by Tuxxin at 90% confidence.
malware
Overlord RAT
tags
exe, OverlordRAT
read the advisory ↗
1h agoreportedwarningThreatFoxsha256_hash:2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6
Overlord RAT indicator: sha256_hash
payload for Overlord RAT, reported by Tuxxin at 90% confidence.
malware
Overlord RAT
tags
exe, OverlordRAT
read the advisory ↗
1h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/ot/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
1h agocorroboratedwarningThreatFoxsha256_hash:3cf7e6fc1725c1bb709b1156bbaa1cf8fe4bab53f59609912984b70b7f140b2f
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nuyar
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/g0/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:www[.]otticaimperatore[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:www[.]pedipeus[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:www[.]partyservice-regensburg[.]info
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:www[.]panificiopallaria[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agocorroboratedwarningThreatFoxsha256_hash:7797272b8cff08547b5ec9fe085e7226bdbbb1845dcf06bbf9ca16526f3c6c50
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, haven, macOS
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/y3w/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxsha256_hash:68b1a3b00dcb3fd6601d30a3b7242d03e586d15d694abec2a6e426d38454ebeb
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/x9/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:www[.]partitodemocraticobat[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agoreportedwarningThreatFoxdomain:orto-stazhkov[.]com[.]ua
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
2h agocorroboratedwarningThreatFoxsha256_hash:3c0deee92fdc43f513533ea9703e14313e9a1b298563864133663eb18a12141f
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://lg[.]afktogel[.]org/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://jg[.]ajuna88[.]org/sro/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxdomain:lg[.]afktogel[.]org
Vidar indicator: domain
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agoreportedwarningThreatFoxip:port:154[.]91[.]53[.]181:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
2h agoreportedwarningThreatFoxip:port:154[.]91[.]53[.]180:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
2h agoreportedwarningThreatFoxip:port:154[.]91[.]53[.]179:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
2h agoreportedwarningThreatFoxip:port:154[.]91[.]52[.]164:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
2h agoreportedwarningThreatFoxip:port:154[.]91[.]52[.]162:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://s4[.]bb69[.]org/r/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/cl3/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxsha256_hash:14f4ff195c3d6719d0fe07d329e673dd99e7fc1354d05def2a95a7691997fc10
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, quill
read the advisory ↗
2h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/ju/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
2h agocorroboratedwarningThreatFoxsha256_hash:b5568ab1d1f80c4332c4a0e053a5a245f7d65687df41cbd0111ecf13497a179f
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, stratos
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/p/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agocorroboratedwarningThreatFoxdomain:facevaluenft[.]com
StrelaStealer indicator: domain
payload_delivery for StrelaStealer, reported by threatcat_ch at 100% confidence.
malware
StrelaStealer
tags
StrelaStealer
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:26395aca4be64added116b156c39db4dd98706e19f6651553b98e2326ed74085
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, frame, macOS
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/hh/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:043dd3381cda35e5570b684d667e679660761049f37ea9a98c596d937a483c8f
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nova
read the advisory ↗
3h agoreportedinfoThreatFoxdomain:169[.]174[.]116[.]136[.]bc[.]googleusercontent[.]com
php[.]shin_webshell indicator: domain
payload_delivery for php[.]shin_webshell, reported by xscon at 50% confidence.
malware
php[.]shin_webshell
tags
gif, PHP, webshell, WordPress, wp-admin
read the advisory ↗
3h agoreportedinfoThreatFoxdomain:37[.]250[.]142[.]34[.]bc[.]googleusercontent[.]com
php[.]shin_webshell indicator: domain
payload_delivery for php[.]shin_webshell, reported by xscon at 50% confidence.
malware
php[.]shin_webshell
tags
gif, PHP, webshell, WordPress, wp-admin
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/ty/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:9460e64b27e828c6832f9ccb95d1caa5b6799c48648a362b6a2d5b0da6c5e311
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nuyar
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://s4[.]bb69[.]org/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agocorroboratedwarningThreatFoxdomain:s4[.]bb69[.]org
Vidar indicator: domain
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://k10[.]ajuna88[.]org/aj/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]190:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
3h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]173:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
3h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]171:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
3h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]178:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
3h agoreportedwarningThreatFoxip:port:8[.]217[.]254[.]211:22
Unknown malware indicator: ip:port
botnet_cc for Unknown malware, reported by anonymous at 100% confidence.
malware
Unknown malware
tags
Supershell
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:32fb201d13db94bc21ea96d91fa50440d7b33abb6a7ccdc3277412d923d1b122
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, forge, Foxveil, macOS
read the advisory ↗
3h agoreportedwarningThreatFoxurl:hxxps://xn--frderverein-schule-gaustadt-pyc[.]de/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
3h agoreportedwarningThreatFoxurl:hxxps://www[.]xn--90abz0a[.]xn--p1ai/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
3h agoreportedwarningThreatFoxurl:hxxps://xn--chodnie-samochodowe-6fd[.]pl/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
3h agoreportedwarningThreatFoxurl:hxxps://xn--logopdie-busse-9hb[.]de/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
3h agoreportedwarningThreatFoxurl:hxxps://zaferron[.]com/
Unknown malware indicator: url
payload_delivery for Unknown malware, reported by CarsonWilliams at 90% confidence.
malware
Unknown malware
tags
ClickFix
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:5b6b4687cc83db6c61c2fc0606176c9913fccb61237a808f76e7e46940ccbfad
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, haven, macOS
read the advisory ↗
3h agocorroboratedwarningThreatFoxurl:hxxps://eq[.]ajuna88[.]org/i/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:www[.]notaiomatano[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:www[.]omniaedilizia[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:www[.]online-ernaehrungsberatung[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:www[.]nonsolocioccolato[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:nowpress[.]org
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:www[.]nuovopameka[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agoreportedwarningThreatFoxdomain:nucleus[.]ltd
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
3h agocorroboratedwarningThreatFoxsha256_hash:0f2ea4c972c7828e01ad90902dc88a9b0943a0ce5a918a070acab8e0b7ea0830
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
4h agocorroboratedwarningThreatFoxurl:hxxps://eq[.]ajuna88[.]org/hg/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
4h agocorroboratedwarningThreatFoxsha256_hash:22c3b8cc00da98c9aa8885476942f83ffe1dbb59af53d9bcb9e77997e3650d9d
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
4h agocorroboratedwarningThreatFoxsha256_hash:3ce53fb4cc83cad84465296fc5b240d65f4848d3de43ac81d665419d1b62cccf
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, quill
read the advisory ↗
4h agocorroboratedwarningThreatFoxurl:hxxps://eq[.]ajuna88[.]org/f/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
4h agocorroboratedwarningThreatFoxurl:hxxps://eq[.]ajuna88[.]org/j/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:www[.]odz-lipno[.]pl
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:www[.]officinameccanicacitrosabrina[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:nownegah[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:immortality[.]vg
Unknown malware indicator: domain
payload_delivery for Unknown malware, reported by anonymous at 90% confidence.
malware
Unknown malware
tags
ZigClipper
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:gdyromed[.]bossbeyanadolu[.]store
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 100% confidence.
malware
ClearFake
tags
ClearFake, mac-0x68dc, macOS
read the advisory ↗
4h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]168:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
4h agoreportedwarningThreatFoxip:port:154[.]91[.]51[.]166:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
4h agoreportedwarningThreatFoxip:port:8[.]217[.]254[.]211:8888
Unknown malware indicator: ip:port
botnet_cc for Unknown malware, reported by anonymous at 100% confidence.
malware
Unknown malware
tags
Supershell
read the advisory ↗
4h agocorroboratedwarningThreatFoxdomain:bossbeyanadolu[.]store
ClearFake indicator: domain
payload_delivery for ClearFake, reported by threatcat_ch at 100% confidence.
malware
ClearFake
tags
ClearFake
read the advisory ↗
4h agocorroboratedwarningThreatFoxsha256_hash:f478683887ae70276d712dab87b65513335df9f28e6ee2fd14b1640d2bebaae5
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, forge, Foxveil, macOS
read the advisory ↗
4h agocorroboratedwarningThreatFoxurl:hxxps://m1[.]ajuna88[.]org/kz/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
4h agoreportedwarningThreatFoxdomain:zg3rq5s4[.]antava[.]store
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 100% confidence.
malware
ClearFake
tags
ClearFake, mac-0xdcf2, macOS
read the advisory ↗
4h agocorroboratedwarningThreatFoxsha256_hash:36e63668a613612a572b95bd41857a2f8ce60edb66dbaab96407f312aa38c869
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
4h agoreportedwarningThreatFoxsha256_hash:80d1bd904e36903507e5d70c256eb4ea8d4befbe4bf01f9aeb70c7009e3203ab
SalatStealer indicator: sha256_hash
payload for SalatStealer, reported by wristhulk at 90% confidence.
malware
SalatStealer
tags
exe, Github, SalatStealer
read the advisory ↗
5h agocorroboratedwarningThreatFoxurl:hxxps://m1[.]ajuna88[.]org/n5/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
5h agoreportedwarningThreatFoxurl:hxxp://153[.]117[.]28[.]212:58844/Mozi.m
Mozi indicator: url
payload_delivery for Mozi, reported by HoneyLabs at 75% confidence.
malware
Mozi
tags
elf, IoT, Mozi
read the advisory ↗
5h agoreportedwarningThreatFoxurl:hxxp://39[.]34[.]169[.]41:44503/Mozi.a
Mozi indicator: url
payload_delivery for Mozi, reported by HoneyLabs at 75% confidence.
malware
Mozi
tags
elf, IoT, Mozi
read the advisory ↗
5h agoreportedwarningThreatFoxurl:hxxp://100[.]10[.]11[.]155:40791/Mozi.m
Mozi indicator: url
payload_delivery for Mozi, reported by HoneyLabs at 75% confidence.
malware
Mozi
tags
elf, IoT, Mozi
read the advisory ↗
5h agoreportedwarningThreatFoxurl:hxxp://216[.]126[.]86[.]205:47333/Mozi.m
Mozi indicator: url
payload_delivery for Mozi, reported by HoneyLabs at 75% confidence.
malware
Mozi
tags
elf, IoT, Mozi
read the advisory ↗
5h agocorroboratedwarningThreatFoxsha256_hash:9a07ad430a31fd5ab970c452b611393497ea0c2f7a0099d93b8d5cae26cb1c02
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
5h agocorroboratedwarningThreatFoxurl:hxxps://m1[.]ajuna88[.]org/be/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:thestrangearchive[.]sg
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:standeradarabia[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:onlineriddles[.]co[.]uk
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:nbmoving[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:continentsagency[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:premierfundingsolution[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:reliablebldgsolutions[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:webnrolls[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:shakilmehraz[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:tallerdegeologia[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:zamferasesores[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:scion[.]co[.]in
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:salaresdelnorte[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:sharonrea[.]com
Unknown Loader indicator: domain
payload_delivery for Unknown Loader, reported by varysz at 75% confidence.
malware
Unknown Loader
tags
etherhiding
read the advisory ↗

Yesterday

75 entries

5h agocorroboratedwarningThreatFoxurl:hxxps://et[.]ajuna88[.]org/rm/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
5h agocorroboratedwarningThreatFoxsha256_hash:d46b70fedc69ea4ece1232babcb9a7913e863522cf9a7eb868a171d7ce146b77
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:moteldb2000[.]com[.]pl
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:mowart[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:minimomultiplo[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:www[.]mariaelenaferraresi[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:monitoramentomirimcosteiro[.]com[.]br
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:www[.]maximasan[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
5h agoreportedwarningThreatFoxdomain:www[.]microprice[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://et[.]ajuna88[.]org/gx/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxsha256_hash:74225d7da25ff0086b5207638d5043ea7cf046990486cfb1275aba0b9f0734cc
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
6h agocorroboratedwarningThreatFoxdomain:cvya[.]com
StrelaStealer indicator: domain
payload_delivery for StrelaStealer, reported by threatcat_ch at 100% confidence.
malware
StrelaStealer
tags
StrelaStealer
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://et[.]ajuna88[.]org/k2/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxsha256_hash:d72bb307e105fc2422c56c136dd02ea64a8e95447ae971a5f3e6571487e30178
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, quill
read the advisory ↗
6h agocorroboratedwarningThreatFoxip:port:161[.]132[.]47[.]189:30002
SpyBanker indicator: ip:port
botnet_cc for SpyBanker, reported by tohure at 100% confidence.
malware
SpyBanker
tags
Android, BankingTrojan, Claro5G, NFCRelay, Peru
read the advisory ↗
6h agocorroboratedwarningThreatFoxip:port:161[.]132[.]50[.]40:30000
SpyBanker indicator: ip:port
botnet_cc for SpyBanker, reported by tohure at 100% confidence.
malware
SpyBanker
tags
Android, BankingTrojan, Claro5G, NFCRelay, Peru
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://et[.]ajuna88[.]org/e/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxsha256_hash:0527f4d58e301239cf8f432363fbabd444d7d0eca1d1d85a675aee4823751023
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
6h agocorroboratedwarningThreatFoxdomain:de[.]aeoncash[.]org
Vidar indicator: domain
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxdomain:s[.]bb69[.]org
Vidar indicator: domain
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://et[.]ajuna88[.]org/ch/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://s[.]bb69[.]org/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://de[.]aeoncash[.]org/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agoreportedwarningThreatFoxip:port:154[.]91[.]53[.]170:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
6h agoreportedwarningThreatFoxip:port:154[.]91[.]50[.]190:9097
VShell indicator: ip:port
botnet_cc for VShell, reported by anonymous at 100% confidence.
malware
VShell
tags
Vshell
read the advisory ↗
6h agocorroboratedwarningThreatFoxurl:hxxps://d5[.]ajuna88[.]org/th/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
6h agocorroboratedwarningThreatFoxsha256_hash:20c3624863f0f182b4e69baac2bab5e40bae2f5b02755d79c01811f597966a26
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nova
read the advisory ↗
7h agocorroboratedwarningThreatFoxurl:hxxps://d5[.]ajuna88[.]org/nv/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
7h agocorroboratedwarningThreatFoxsha256_hash:eff7269bed8e5f5ec526b9be411ef35237d0eea5eadebc2017b5d83277619852
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, nuyar
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:miaso[.]org[.]eg
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mazzara[.]love
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mcepdkt[.]in
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:maximoimpactocomercial[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:medicinabemestar[.]com[.]br
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:medline[.]az
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mendagropapers[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:matebelelandpulse[.]co[.]zw
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mediasales[.]az
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:masaz-torun[.]pl
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marta-romanowska[.]pl
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mediatorsecurity[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mda-cro[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mit-kindern-leben[.]de
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mehtasolutions[.]de
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mezoberenyszallas[.]hu
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:meejab[.]com[.]ng
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mataran[.]eu
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agocorroboratedwarningThreatFoxurl:hxxps://d5[.]ajuna88[.]org/x0/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
7h agocorroboratedwarningThreatFoxsha256_hash:180b4faab4c372c74519f10b13648788c284dbeaa6d990202aa15cb141b27e3a
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, haven, macOS
read the advisory ↗
7h agocorroboratedwarningThreatFoxdomain:demo2[.]goldschadt[.]com
StrelaStealer indicator: domain
payload_delivery for StrelaStealer, reported by threatcat_ch at 100% confidence.
malware
StrelaStealer
tags
StrelaStealer
read the advisory ↗
7h agocorroboratedwarningThreatFoxurl:hxxps://r9[.]ajo889[.]org/hf/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
7h agocorroboratedwarningThreatFoxsha256_hash:1ce99f394fac543ebffb222d8fb0f9b3c842aabd2aaa3ca8276795454e31e83f
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, haven, macOS
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marienwald[.]de
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mabnafartak[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:magiczna-podloga[.]pl
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:madeiratratadanehemy[.]com[.]br
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marketingrainbow[.]site
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:madinafinefoods[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marriagecord[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:www[.]bellscares[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mahmoudnorouzi[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:mail02[.]financial-reality[.]sk
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:maestrocommerceltd[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marokko-shop-dortmund[.]de
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:magga[.]mw
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:www[.]malavasiagostino[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
7h agoreportedwarningThreatFoxdomain:marliaads[.]com
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
8h agocorroboratedwarningThreatFoxurl:hxxps://r9[.]ajo889[.]org/ek5/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
8h agocorroboratedwarningThreatFoxsha256_hash:7485a6c8598785fd12f1e9c260d15ab337d4c209023843acd7b82fe68f47f0d8
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, chant, ClickFix, Foxveil, macOS
read the advisory ↗
8h agocorroboratedwarningThreatFoxsha256_hash:7591bf1887eea31d042a2822e0b410ead5c0022b5f225dd57e5234d5c9b56292
AMOS indicator: sha256_hash
payload for AMOS, reported by c4ffeine at 100% confidence.
malware
AMOS
tags
Amos, ClickFix, Foxveil, macOS, willow
read the advisory ↗
8h agocorroboratedwarningThreatFoxurl:hxxps://r9[.]ajo889[.]org/n8r/
Vidar indicator: url
botnet_cc for Vidar, reported by crep1x at 100% confidence.
malware
Vidar
tags
Vidar
read the advisory ↗
8h agocorroboratedwarningThreatFoxdomain:coursepulse[.]sitasys[.]in
StrelaStealer indicator: domain
payload_delivery for StrelaStealer, reported by threatcat_ch at 100% confidence.
malware
StrelaStealer
tags
StrelaStealer
read the advisory ↗
8h agoreportedwarningThreatFoxdomain:macelleriapavese[.]it
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
8h agoreportedwarningThreatFoxdomain:marcalvendeghaz[.]hu
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗
8h agoreportedwarningThreatFoxdomain:lmprojetos[.]com[.]br
ClearFake indicator: domain
payload_delivery for ClearFake, reported by anonymous at 90% confidence.
malware
ClearFake
tags
compromised, etherhide
read the advisory ↗

Newest 200 reports, collapsed to one row per indicator, oldest last. Nothing on this page is a finding about this estate — it is what other people are publishing, kept so a claim can be checked against its source rather than believed.