MalwarePublished 8 May 2026Updated 9 May 2026

tlp clear · Maltrail IOC for 2026-05-09

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-09

Impact

The impact is limited to the presence of malware-related network indicators that may signal infection or malicious activity. There is no information about active exploitation, direct system compromise, or ransomware use. The medium severity rating suggests a moderate risk level, primarily for detection and monitoring rather than immediate critical threat.

Defensive guidance

Organizations should incorporate these indicators into their threat detection and monitoring systems to identify potential infections. Since no vendor advisory or specific mitigation guidance is provided, standard incident response procedures for malware detection should be followed. Patch status is not applicable as this is an IOC feed rather than a vulnerability.

Summary

The report provides a set of indicators of compromise related to malware activity identified as 'osx_atomic' from the CIRCL OSINT Feed. It lists several suspicious domains and URLs linked to this malware, useful for detection and monitoring purposes. The threat is categorized as medium severity based on the source classification but lacks detailed technical exploitation data.

Indicators of compromise

Domains 6

osx_atomic

longbeachmartialarts.com
tencentstablecoin.com
harveylewisinsuranceagency.com
jacksonvillemma.com
lumenagnet.com
wechatstablecoin.com

URLs 4

osx_atomic

https://api.github.com/repos/stamparm/maltrail/commits/9faa46e5414d4aa3d994b3538391f8c2c1ec1f96
https://api.github.com/repos/stamparm/maltrail/commits/95123619541a82fdb6ab588fc477765dbfe8bb4c
https://www.rstcloud.com/macsync-stealer-c2-infrastructure-rotation
https://www.virustotal.com/gui/file/2cd7305adbe94fecaca76602b028e3279edd9be563e6c6f1401bc69df1155aaa/detection

Community reviews

Loading reviews…