MalwarePublished 7 Jun 2026Updated 8 Jun 2026

Maltrail IOC for 2026-06-08

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is currently limited to detection of suspicious or malicious network activity as indicated by the IOC. There is no evidence of active exploitation or direct compromise. The medium severity suggests a moderate level of concern for network defenders monitoring for related activity.

Defensive guidance

Since this is an IOC without an associated vulnerability or patch, no direct remediation or patching is applicable. Network defenders should incorporate the IOC into their detection and monitoring tools as appropriate. No vendor advisory or official fix exists for this type of threat.

Summary

The report details a Maltrail IOC for June 8, 2026, identified through CIRCL's OSINT feed. It is classified as malware-related network activity with medium risk but lacks specific technical indicators or affected software versions. No patches or fixes are applicable since this is an IOC rather than a vulnerability. No known active exploitation has been observed.

Indicators of compromise

Domains 4,890

0k2wzruanvk1.toran.shandroid_bankbot
895343.comandroid_bankbot
applyonlineservise.comandroid_bankbot
applyrupaycardcervicse.comandroid_bankbot
arkabud.beandroid_bankbot
auth.getmaxhealthcovered.comandroid_bankbot
bank-poc.tarsyer.comandroid_bankbot
br777cc.comandroid_bankbot
callback-icicibankuk.comandroid_bankbot
cancelcardprotection.inandroid_bankbot

URLs 43

https://api.github.com/repos/stamparm/maltrail/commits/d37946e94c85744c06c5fed5191500bd588803baandroid_bankbot
https://api.github.com/repos/stamparm/maltrail/commits/6f175cc28154c9abfeb7cf0267d802afd214f983android_bankbot
https://x.com/Malwarehunterr/status/2063713613790248987android_bankbot
https://api.github.com/repos/stamparm/maltrail/commits/a7d480635ab192c8d2aeeb0875ea52ae2bf49796osx_atomic
https://api.github.com/repos/stamparm/maltrail/commits/a8ba374163213fa8866bdcd86ba57e4dc04c4e73apt_unc2465
https://api.github.com/repos/stamparm/maltrail/commits/b4a8b5e6da48a0d54b0968ac5edaf956999d5171sectoprat
https://api.github.com/repos/stamparm/maltrail/commits/1c3c644ea274a090dafe7f177d99a4e921c334c5cyberstrikeai
https://api.github.com/repos/stamparm/maltrail/commits/48b18dd0a9e2cd507e818ba2abad08fcd005d264android_joker
https://api.github.com/repos/stamparm/maltrail/commits/a1f050ef34b1d047e5adc164c7c128ad74e46bbeapt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/cf8ae4ce590cafe43b61aad4c125f700bf5ae36dosx_nova

IP addresses 18

185.203.240.32sectoprat
212.43.156.145sectoprat
212.43.156.153sectoprat
212.43.156.196sectoprat
120.24.237.176cyberstrikeai
101.37.210.236supershell_c2
111.229.193.141supershell_c2
146.71.85.53supershell_c2
178.16.52.217c2_panel
193.169.228.147c2_panel

Community reviews

Loading reviews…