Maltrail IOC for 2026-06-30
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
This entry reports a Maltrail Indicator of Compromise (IOC) dated 2026-06-30 related to malware activity. It is an OSINT observation from the CIRCL OSINT Feed with a medium risk level. No specific affected software versions or detailed technical indicators are provided. There is no known exploit in the wild and no patch is available or applicable.
Indicators of compromise
Domains 51
- flosea.buzzandroid_fvncbot
- moja-paczka.flosea.buzzandroid_fvncbot
- stickcloth.xyzoffloader
- letsgoautomotive.comsocgholish
- js-pre.letsgoautomotive.comsocgholish
- php-panel.letsgoautomotive.comsocgholish
- anxtlog.dynuddns.netapt_kimsuky
- edomoies.dynuddns.netapt_kimsuky
- ipsnar.dynuddns.netapt_kimsuky
- mexnhis.dynu.orgapt_kimsuky
URLs 7
- https://api.github.com/repos/stamparm/maltrail/commits/970a302804927c665bf38afa4eb790c17c02055eandroid_fvncbot
- https://api.github.com/repos/stamparm/maltrail/commits/ab2be290147ef327f094bb9350d99f7bb1a118adcyberstrikeai
- https://api.github.com/repos/stamparm/maltrail/commits/10ed0e9444e7ebefc0d9d5edaaa16fc9629dff07offloader
- https://api.github.com/repos/stamparm/maltrail/commits/6dbb09d4cced69def3ba0cc2ebc7e919f15d9f1csocgholish
- https://x.com/Malware_Brandon/status/2071663022938976369socgholish
- https://api.github.com/repos/stamparm/maltrail/commits/c264a6d6581282e9edf93d989d9973f0152ea0b0apt_kimsuky
- https://api.github.com/repos/stamparm/maltrail/commits/5798671ff3d0281051590630c695c32a0755750f
IP addresses 2
cyberstrikeai
- 202.160.76.181
- 202.160.76.236
Community reviews
Loading reviews…