MalwarePublished 11 Aug 2026Updated 12 Aug 2026

Maltrail IOC for 2026-08-12

Source CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Impact

The impact is limited to the presence of malware-related indicators linked to the MuddyWater APT group. There is no evidence of active exploitation or ransomware campaigns. No affected software versions or systems are identified, so the impact is primarily situational awareness and threat detection.

Defensive guidance

No specific mitigation or patch is available or indicated. Organizations should monitor for the provided indicators (domain and URL) in their network traffic and logs. Patch status is not applicable.

Summary

The report details malware-related indicators of compromise (IOCs) collected by the CIRCL OSINT Feed for the date 2026-08-12. The indicators include a domain (equaldrone489.mypi.co) and a URL pointing to a GitHub commit, both associated with the APT group MuddyWater. There is no information about affected software versions, CVEs, or active exploitation. The data is observational OSINT without direct evidence of exploitation or patch availability.

Indicators of compromise

Domains 1

apt_muddywater

equaldrone489.mypi.co

URLs 1

apt_muddywater

https://api.github.com/repos/stamparm/maltrail/commits/996e76b1bcd8b5302b9b8c1e40d58ee959d49358

Community reviews

Loading reviews…