Maltrail IOC for 2026-05-27
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-05-27
Indicators of compromise
Domains 160
- pinglepis.netnetsupport
- sockmind.netnetsupport
- shinyhunte.red0ktapus
- imajinandfusion.comfakeapp
- sacp.algoma.itfakeapp
- cdn-reports.commagentocore
- refreshwss.netmagentocore
- bryonsad.netnetsupport
- feersona.netnetsupport
- security-check-guest.com
URLs 92
- https://api.github.com/repos/stamparm/maltrail/commits/64f398a70b9001b8149676f0414fbd67bc85e368netsupport
- https://api.github.com/repos/stamparm/maltrail/commits/0f3e1d88cf957fbf7e7e5143deedc64d59510ddb0ktapus
- https://x.com/AlvieriD/status/20595381063620362500ktapus
- https://api.github.com/repos/stamparm/maltrail/commits/3ca103ca8394884a9b891350789cab23b0c378edfakeapp
- https://x.com/patialavii/status/2059508901507428597fakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/8c9b09abab38972f195544ae1ff91d458d552931magentocore
- https://api.github.com/repos/stamparm/maltrail/commits/d4d23f3e6524855d32bf14d9d51e4515c7953f76magentocore
- https://api.github.com/repos/stamparm/maltrail/commits/c4e133882926e531519056e45dd58142ab31ee2fnetsupport
- https://x.com/JAMESWT_WT/status/2059517877951103080netsupport
- https://app.any.run/tasks/ca2e99cd-6247-4633-9cd8-f64b4928ed9cnetsupport
IP addresses 28
- 209.99.186.243netsupport
- 209.99.186.75netsupport
- 5.188.87.210sectoprat
- 103.146.202.144cyberstrikeai
- 154.219.121.168cyberstrikeai
- 72.60.77.221apt_lazarus
- 45.178.181.218banload
- 85.239.144.177generic
- 143.14.179.112darkgate
- 204.10.194.247hacked_npmrepos
Community reviews
Loading reviews…