MalwarePublished 25 May 2026Updated 26 May 2026

tlp clear · Maltrail IOC for 2026-05-26

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-26

Impact

The impact is primarily related to the presence of malware-related network indicators that could signify ongoing or potential malicious activity. No direct exploit or vulnerability is described, and no known active exploitation is reported. The medium severity reflects the potential risk these IOCs pose for detection and response efforts but does not indicate an immediate critical threat.

Defensive guidance

Security teams should incorporate these indicators into their detection tools and monitoring systems to identify potential malicious activity. No urgent action beyond standard threat intelligence integration is indicated.

Summary

The threat intelligence entry catalogs multiple IOCs related to malware activity observed on 2026-05-26, including suspicious domains, IP addresses, and URLs linked to different malware families or campaigns. The data is derived from manual OSINT collection and external network activity analysis. No CVE or specific exploit information is associated. The report serves as an observational feed to aid detection and monitoring rather than describing a new vulnerability or active exploit.

Indicators of compromise

Domains 7

exactupdate.comosx_atomic
invokeupdate.comosx_atomic
mothechurh.comosx_atomic
frozetk.cyoulummac2
vaultchainblockpulse.comapt_lazarus
analityc-cdn.orgmagentocore
socket-analytics.netmagentocore

URLs 10

https://api.github.com/repos/stamparm/maltrail/commits/adefdc022653f48bf60a39b8c566dd05eaf05dedosx_atomic
https://www.virustotal.com/gui/ip-address/154.7.253.166/relationsosx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/5fef578f8a6e787c3e2059c7e66f16076d9887e4lummac2
https://api.github.com/repos/stamparm/maltrail/commits/c4d89e3d64416bc94e2322f7bb654a643550ae60apt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/5c5e9150a879bf48ab8d6e4e1cbc921224bb1d3bapt_lazarus
https://api.github.com/repos/stamparm/maltrail/commits/34c42104085f7bdaa7383bbb77ffd77539f5af00indirat
https://x.com/Fact_Finder03/status/2059208168299733103indirat
https://www.virustotal.com/gui/file/2874868daf6660876cec6a903d2bbb9b437d8d2ff173d8bc39e6f18a016ed838/detectionindirat
https://api.github.com/repos/stamparm/maltrail/commits/4eb3201a66ccc727a7d4a68fa125dde0faf65ab6magentocore
https://api.github.com/repos/stamparm/maltrail/commits/1ffff12f999254e327664dca5ebd6e28241981bemagentocore

IP addresses 2

72.61.123.154apt_lazarus
82.39.86.48indirat

Community reviews

Loading reviews…