Maltrail IOC for 2026-06-21
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-06-21
Indicators of compromise
Domains 30
- baskwms.topfakeapp
- aigtech.devapt_lazarus
- cartned.sheexcell.inkapt_unc6353
- duflaro.comapt_unc6353
- inventorepkrje.sheexcell.inkapt_unc6353
- iokert.comapt_unc6353
- lifechangerai.siteapt_unc6353
- link.sheexcell.inkapt_unc6353
- mxloft.sheexcell.inkapt_unc6353
- sheexcell.inkapt_unc6353
URLs 15
- https://api.github.com/repos/stamparm/maltrail/commits/38dde887a57a429a193affc9349e07a0655254f7generic_fortibleed
- https://x.com/MonThreat/status/2068391787366957546generic_fortibleed
- https://api.github.com/repos/stamparm/maltrail/commits/cc71bb10b1b33d0310b36e20935103ec7d024e22fakeapp
- https://x.com/v0lundr_/status/2064374733550817617fakeapp
- https://api.github.com/repos/stamparm/maltrail/commits/3ac7857492d7aaee64e0622845d5d2865cd21b50powershell_injector
- https://x.com/_IMalihi_/status/2064747807320252780powershell_injector
- https://api.github.com/repos/stamparm/maltrail/commits/83acedc23ca7d5d560da36afe1b55a0effef5adeapt_lazarus
- https://x.com/v0lundr_/status/2065375317682696560apt_lazarus
- https://api.github.com/repos/stamparm/maltrail/commits/7046159134371d026ad55d88a063f5845e7d9dc5apt_unc6353
- https://x.com/_IMalihi_/status/2067948568401395880apt_unc6353
IP addresses 15
- 211.72.37.226generic_fortibleed
- 38.55.151.63fakeapp
- 161.248.87.10powershell_injector
- 103.136.43.65apt_turla
- 103.143.40.60apt_turla
- 103.143.40.91apt_turla
- 104.167.16.42apt_turla
- 185.253.116.122apt_turla
- 38.180.173.194apt_turla
- 45.89.107.77apt_turla
Community reviews
Loading reviews…