MalwarePublished 23 Mar 2026

tlp clear · Maltrail IOC for 2026-03-23

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-23

Impact

The impact is currently limited to threat awareness as no specific exploits or vulnerabilities are identified. There is no evidence of active exploitation or direct compromise linked to this IOC. It primarily serves as an intelligence indicator to inform monitoring and detection efforts.

Defensive guidance

Security teams should incorporate this intelligence into their detection systems as appropriate but no urgent action is mandated based on the provided information.

Summary

The report details a malware-related IOC published on 2026-03-23 by the CIRCL OSINT Feed. It is classified as a medium-risk observation involving network activity but lacks detailed technical indicators or affected software versions. There are no known exploits in the wild and no patches available or required. The IOC serves as an external analysis for threat intelligence purposes without actionable remediation steps.

Indicators of compromise

Domains 753

cyberstrike.infra.makekod.rucyberstrikeai
8k.appchat-cn-net-whatsapp.com.cnfakeapp
androidgo-web-whatsapp.net.cnfakeapp
animal-whatsapp.hl.cnfakeapp
appchat-cn-net-whatsapp.com.cnfakeapp
apple-whatsapp.hl.cnfakeapp
bk.u-x-whatsapp.hl.cnfakeapp
castle-whatsapp.hl.cnfakeapp
cleango-web-whatsapp.net.cnfakeapp
cn-aefp-whatsapp.hl.cnfakeapp

URLs 25

https://api.github.com/repos/stamparm/maltrail/commits/888ef97aed067b878e86fb633a95f77091790dfccyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/8a506eb3f889a1c035c4374d7968abb639c2d4d5fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/3c443287f3da0bc6f9b860788e0e97fa5b7f218bmagentocore
https://api.github.com/repos/stamparm/maltrail/commits/ed2b6f0eed3dce127f3b9c566b9c50ea48488da7apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/bda63cc22ce9dc90ba490909c53de3b17c85b0b0osx_nova
https://api.github.com/repos/stamparm/maltrail/commits/ba0fd66d71f9a8ce4e2167b2ec87d2bfc85e99dffakeapp
https://api.github.com/repos/stamparm/maltrail/commits/f038485f5762f1f9ff69142bcfd167b133a900e6sectoprat
https://api.github.com/repos/stamparm/maltrail/commits/739147f062760ac2037274bd4261c62688cfc0d5android_joker
https://api.github.com/repos/stamparm/maltrail/commits/ea26c28f18ba526823fafd788833e2eb60b7b0efoffloader
https://api.github.com/repos/stamparm/maltrail/commits/cfca4707b81a5262ac9cf23f644a9f8de7b70951

IP addresses 27

1.94.11.118cyberstrikeai
187.124.171.203cyberstrikeai
2.58.56.150cyberstrikeai
3.239.224.77cyberstrikeai
37.9.15.215cyberstrikeai
158.94.208.58sectoprat
45.67.228.227sectoprat
85.137.253.116sectoprat
1.94.113.96
101.200.193.211

Community reviews

Loading reviews…