MalwarePublished 3 Apr 2026Updated 4 Apr 2026

tlp clear · Maltrail IOC for 2026-04-04

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-04-04

Impact

The impact is limited to detection and monitoring of potential malware-related network activity. There is no evidence of active exploitation or direct compromise from this IOC alone. It serves as an intelligence indicator to assist in identifying suspicious network behavior.

Defensive guidance

Security teams should incorporate this IOC into their detection and monitoring systems to enhance visibility of potential malware activity. No urgent action is mandated by the vendor or source.

Summary

The threat is an IOC published by CIRCL on April 4, 2026, related to malware network activity detected by Maltrail. It is classified as medium severity but lacks detailed technical indicators or affected software versions. No exploits or patches are associated with this IOC, indicating it serves primarily as a detection and monitoring artifact rather than a vulnerability or active exploit.

Indicators of compromise

Domains 1,509

vscode-css-sort-website.vercel.appapt_lazarus
vscode-marketplace-badge.vercel.appapt_lazarus
vscode-theme-lesser.vercel.appapt_lazarus
vscode-themes-community.vercel.appapt_lazarus
vscodeweb.vercel.appapt_lazarus
0iwbrl.chromeflack.in.netek_clearfake
0twkb.thornbay.in.netek_clearfake
15fdtzgp.vividfox.in.netek_clearfake
1att0-crest.pozellant.in.netek_clearfake
24zog.coddlcaught.in.netek_clearfake

URLs 22

https://api.github.com/repos/stamparm/maltrail/commits/4cdc24db954f7f69f7c7527324f0c596fb2bb3caapt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/a67feedf7b104ae0154c8da057dac597e4d8dcaaek_clearfake
https://api.github.com/repos/stamparm/maltrail/commits/caa38542d4dcc67eef5aa7f70ce4a64c58604d6eapt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/50a9c711bb54df32a50a92d26d7498fd63d38fe6osx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/be7d5b8f2c793fba117b807c68d847d066c81225osx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/324a203b1baccd4c292bb2e94b50334263d9c76dcyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/2e3135c5b261e29be247665e7bb314793b14970fandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/44168879df55bfe9395af85a42c21da6be0622f3lummac2
https://api.github.com/repos/stamparm/maltrail/commits/9b20563e50b7a98034a7ba1d65c2f06694e4f7a9
https://api.github.com/repos/stamparm/maltrail/commits/cad8e35d91fc06a2cea816aad15ee420aea2bc51vidar

IP addresses 10

101.32.115.241cyberstrikeai
118.194.232.21cyberstrikeai
159.75.69.30cyberstrikeai
43.154.250.113cyberstrikeai
43.167.163.197cyberstrikeai
49.232.211.223cyberstrikeai
151.243.113.57vidar
173.211.46.145sectoprat
185.203.240.143sectoprat
47.76.181.119supershell_c2

Community reviews

Loading reviews…