MalwarePublished 1 Jul 2026Updated 2 Jul 2026

Maltrail IOC for 2026-07-02

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is limited to detection and monitoring of potential malware-related network activity. There is no direct software vulnerability or exploit described, so no direct compromise or system impact is detailed. This IOC can aid defenders in identifying suspicious activity but does not itself represent a software security flaw.

Defensive guidance

Security teams should incorporate this IOC into their detection and monitoring tools as appropriate. No urgent remediation actions are indicated by the source data.

Indicators of compromise

Domains 2,269

proxies.internetshadow.linkredtail_miner
proxies.internetshadow.orgredtail_miner
wamous.duckdns.orgapt_transparenttribe
supremejudiciarycourt.comapt_transparenttribe
supremejudiciaryofindia.comapt_transparenttribe
scigovt.supremejudiciarycourt.comapt_transparenttribe
scigovt.supremejudiciaryofindia.comapt_transparenttribe
browseblogmenu.dynu.netapt_kimsuky
browseblogmenus.dynu.netapt_kimsuky
cmsidntm.dynu.orgapt_kimsuky

URLs 20

https://api.github.com/repos/stamparm/maltrail/commits/09ad3f58fef0c6283008311169e6ce5c0b1ef14eredtail_miner
https://threatfox.abuse.ch/browse/malware/elf.redtailredtail_miner
https://api.github.com/repos/stamparm/maltrail/commits/8c76b71e8ceb7e1e3bd5e289b9da74085d9be1deapt_transparenttribe
https://x.com/Cyberteam008/status/2072511370210529494apt_transparenttribe
https://www.virustotal.com/gui/file/48b8012bc797d0cea84a8b9e59b210f7e781bbdcdab524cf3b91d43ade5ac5b5/detectionapt_transparenttribe
https://www.virustotal.com/gui/file/579dbcf538cdc92074452194f2f8fe9679ad61ef5ab0bb0a6eaf818151d13788/detectionapt_transparenttribe
https://www.virustotal.com/gui/file/8a9978efb4c6dbd077a6d0fe3522d13d2c5434e2f562be41fa2cc2a443c5997f/detectionapt_transparenttribe
https://www.virustotal.com/gui/file/d0141b19a68e7cb6e3fb2587f4b8e18635527eed3d186663aa2ed29781416759/detectionapt_transparenttribe
https://www.virustotal.com/gui/file/e1716391af8b2f6a2d191ac0a2eda3c57fe19aa05560b0c0d43e6160660160f9/detectionapt_transparenttribe
https://api.github.com/repos/stamparm/maltrail/commits/4c21ac1f1d936903059ba46bc1600aa33c8d0223apt_transparenttribe

IP addresses 214

101.36.104.242redtail_miner
101.47.8.187redtail_miner
104.207.47.232redtail_miner
104.207.59.109redtail_miner
104.207.59.23redtail_miner
104.234.155.104redtail_miner
104.236.83.40redtail_miner
107.172.252.155redtail_miner
109.236.50.3redtail_miner
109.24.152.219redtail_miner

Community reviews

Loading reviews…