MalwarePublished 24 Mar 2026

tlp clear · Maltrail IOC for 2026-03-24

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-03-24

Impact

The impact is currently limited to awareness of a medium-risk malware-related IOC. There are no known active exploits or vulnerabilities associated with this report, and no direct patch or mitigation is available. Organizations should consider this information as part of their threat intelligence but no immediate operational impact is indicated.

Defensive guidance

Since it is an observational report without specific actionable indicators, no direct mitigation steps can be recommended. Security teams should monitor relevant threat intelligence sources for updates and incorporate this IOC into their detection capabilities if applicable.

Summary

The report details a malware-related IOC identified on 2026-03-24 from the CIRCL OSINT Feed. It is classified as medium risk and relates to network activity observed externally. No affected product versions or specific vulnerabilities are listed, and no exploit details or indicators of compromise are included. The threat is documented as an observation without actionable technical specifics or remediation options.

Indicators of compromise

Domains 19

dp.islamic-finder.orgapt_sidewinder
disanviet.homesandroid_fakeapp
itrekker.spaceandroid_fakeapp
moitasec.comandroid_fakeapp
ocngongiare.comandroid_fakeapp
thcsmyxa-nd.comandroid_fakeapp
tourmini.siteandroid_fakeapp
checkmarx.zonehacked_trivy
htax-store.dns.navyapt_kimsuky
mtnvs.dynv6.netapt_kimsuky

URLs 9

https://api.github.com/repos/stamparm/maltrail/commits/fc3d78d0db5e6d4006442ee4ae23d4c57f719fcfapt_sidewinder
https://api.github.com/repos/stamparm/maltrail/commits/d5a6e55d210c3077141509cb8200294d8d9f5709android_fakeapp
https://x.com/SpiderLabs/status/2036076835889418406android_fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/63e908ab0abb9fcf04c0a393485987abe1bb44echacked_trivy
https://www.wiz.io/blog/teampcp-attack-kics-github-actionhacked_trivy
https://api.github.com/repos/stamparm/maltrail/commits/d4de73afbc24cd0d0b70fe788392232acb486051apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/77996e570aefc5688a3af37c05e9094059462cbdandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/4c86bbe470655e943b2c95c484d943f874e440f1apt_unc2465
https://api.github.com/repos/stamparm/maltrail/commits/f0f25f3b92bbc48018825d984d6d32ebbf333a5efakeapp

Community reviews

Loading reviews…