MalwarePublished 12 Jun 2026Updated 13 Jun 2026

Maltrail IOC for 2026-06-13

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

This entry reports an Indicator of Compromise (IOC) related to Maltrail dated 2026-06-13. It is categorized as malware and is based on open-source intelligence (OSINT) from the CIRCL OSINT Feed. No specific affected software versions or detailed technical indicators are provided. There is no known exploit in the wild and no patch or remediation is applicable.

Impact

The impact is currently limited to detection of suspicious or malicious network activity as identified by Maltrail. There is no evidence of active exploitation or direct vulnerability to specific software versions. The threat level is assessed as medium based on the source classification.

Defensive guidance

Security teams should use this IOC to enhance detection capabilities within their network monitoring tools but no direct fix is applicable.

Summary

The report details a Maltrail IOC for the date 2026-06-13 sourced from CIRCL OSINT Feed. It is classified as malware-related network activity observed through external analysis. No technical indicators or affected software versions are specified, and no active exploitation or patch availability is noted.

Indicators of compromise

Domains 809

linkednewsapi.tophavoc
sharingfile.cloudhavoc
berginiya.n-e.krapt_kimsuky
history.berginiya.n-e.krapt_kimsuky
cert.tomlee.dns.armyapt_kimsuky
doc-check.dynv6.netapt_kimsuky
tomlee.dns.armyapt_kimsuky
1g.gi8.infopowershell_injector
2x.gi8.infopowershell_injector
6g.gi8.infopowershell_injector

URLs 12

https://api.github.com/repos/stamparm/maltrail/commits/2ab20127c846812c0e6ebbc8d9a7de89389a7330havoc
https://www.acronis.com/en/tru/posts/behind-khmer-shadow-targeted-espionage-against-cambodian-government-entitieshavoc
https://www.virustotal.com/gui/file/b3e853eee14fb7948c6907888ee07139085ba9af4231c30e97ff6236b86ca024/detectionhavoc
https://api.github.com/repos/stamparm/maltrail/commits/f1c82de823eb1b070479283ddf2f8a1f022c2dc7apt_kimsuky
https://x.com/skocherhan/status/2064784809990234184apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/d752a08dbe2a1ac60d301736247e3f2d9a9d362dapt_kimsuky
https://x.com/_IMalihi_/status/2065448396836495551apt_kimsuky
https://api.github.com/repos/stamparm/maltrail/commits/7faa3c391b5d6f9eb654469ac489bd6456860a53osx_snappy
https://x.com/moonlock_lab/status/2065098539424719235osx_snappy
https://x.com/moonlock_lab/status/2065451576441905561osx_snappy

IP addresses 2

osx_snappy

179.43.166.242
91.92.243.90

Community reviews

Loading reviews…