Skip to main content
MalwarePublished 07/25/2026Updated 07/26/2026

Maltrail IOC for 2026-07-26

Source CIRCL OSINT Feed

0
  • TLP:CLEAR, disclosure is not limited
  • malware

Description

Maltrail IOC for 2026-07-26

Impact

The impact is limited to the detection of potential malicious network activity as indicated by the IOC. There is no evidence of active exploitation or direct compromise of software or systems. The medium severity suggests moderate concern but no immediate critical threat.

Defensive guidance

No patch or official remediation is available for this IOC. Security teams should incorporate this IOC into their detection and monitoring tools to identify related network activity. Since this is an observation from OSINT, no direct remediation is required beyond standard monitoring and response procedures.

Indicators of compromise

Domains 34

  • calvad.com
  • crypto.com.v3240.com
  • dheduc.com
  • portal-gouv.com
  • privatesmsgateway.com
  • api.cupworldcup.siteandroid_ngate
  • api.dashboardcloud.appandroid_ngate
  • cupworldcup.siteandroid_ngate
  • dashboardcloud.appandroid_ngate
  • semprecardsecure.comandroid_ngate

URLs 10

  • https://api.github.com/repos/stamparm/maltrail/commits/844a11c13a8fec54b4f6d98cbaec879bd86e82d6
  • https://api.github.com/repos/stamparm/maltrail/commits/c516a7cc668a74f51e65f7d7086d6c72c7959552android_ngate
  • https://x.com/Merlax_/status/2080775028690596304android_ngate
  • https://api.github.com/repos/stamparm/maltrail/commits/381147a46e25f16ef9d8acf6f879f38bc810cfacpython_injector
  • https://x.com/Yusufcancakiir/status/2081342110830104859python_injector
  • https://api.github.com/repos/stamparm/maltrail/commits/7a652e1f8450f703515bc4a0ad222d261b8d32aavidar
  • https://x.com/Malwarehunterr/status/2081403753383829974vidar
  • https://api.github.com/repos/stamparm/maltrail/commits/e08789d8533484b0c19ce70c976ac666a29a781asectoprat
  • https://x.com/BlinkzSec/status/2081414341480403152sectoprat
  • https://api.github.com/repos/stamparm/maltrail/commits/80868ff76ac5790a96426f1bbb22bcfb907a7c3csilverfox

IP addresses 4

  • 181.214.221.30android_ngate
  • 104.248.147.159python_injector
  • 134.195.88.33vidar
  • 178.16.55.227sectoprat

Community reviews

Loading reviews…