MalwarePublished 2 May 2026Updated 3 May 2026

tlp clear · Maltrail IOC for 2026-05-03

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-03

Impact

The impact is currently limited due to the lack of specific affected products, exploit details, or indicators. The medium severity rating suggests a moderate risk level, but without further context or exploitation evidence, the practical impact remains unclear.

Defensive guidance

Since this is an OSINT observation without actionable indicators, no direct mitigation steps can be recommended. Security teams should monitor updates from the CIRCL OSINT Feed for any additional information or indicators that may require response.

Summary

The report details a malware-related IOC published by CIRCL OSINT Feed with a medium threat level. It is an observation type event based on manual collection of open-source intelligence, focusing on network activity. There are no specific affected software versions, no known exploits, and no technical indicators shared in this data. The threat is classified as medium severity based on the source's assessment.

Indicators of compromise

Domains 429

cdn.teghea.icuandroid_fvncbot
deghan.shopandroid_fvncbot
uieabne.icuandroid_fvncbot
vebateg.icuandroid_fvncbot
yebnae.icuandroid_fvncbot
yuanme.icuandroid_fvncbot
actblues.netapt_unc2465
adrilex.digitalapt_unc2465
aideepflux.comapt_unc2465
brightenforge.comapt_unc2465

URLs 12

https://api.github.com/repos/stamparm/maltrail/commits/2ecce29626c479ef756f4d65561a986f641ab758android_fvncbot
https://api.github.com/repos/stamparm/maltrail/commits/b21f458fff75da5853728d44950430cc75e95443apt_unc2465
https://api.github.com/repos/stamparm/maltrail/commits/6960565a7108e064ba6135d393908f42e93c4ccaerrtraffic_tds
https://api.github.com/repos/stamparm/maltrail/commits/a5f716319d36dd2c94cca47c963d87836731aff8fakeapp
https://api.github.com/repos/stamparm/maltrail/commits/408f8a1ef904f61dbcec559f1799c90f7687f98eerrtraffic_tds
https://api.github.com/repos/stamparm/maltrail/commits/a0bc7fe6138c4f451cfd5110de0e518d9f8d5aa1apt_patchwork
https://api.github.com/repos/stamparm/maltrail/commits/9fdbcedfa6abc5f2442feb901de34df037bbd5a1offloader
https://api.github.com/repos/stamparm/maltrail/commits/b6d89f0bf264c1f20457d5c3d954ee24c4499fafandroid_joker
https://api.github.com/repos/stamparm/maltrail/commits/11929eadef9f0481f6e88e7db86d7b5318bd7f4efakeapp
https://x.com/Malwarehunterr/status/2050906481659457697fakeapp

IP addresses 3

asyncrat

160.187.210.154
170.205.31.153
212.193.3.143

Community reviews

Loading reviews…