Skip to main content
MalwarePublished Updated

Maltrail IOC for 2026-08-14

Source CIRCL OSINT Feed

0

TLP:CLEAR, disclosure is not limited

Description

Maltrail IOC for 2026-08-14

Indicators of compromise

Domains 7

  • shinyhunters.group0ktapus
  • shinyhunters.red0ktapus
  • joefilters.com0ktapus
  • api.joefilters.com0ktapus
  • digitden.cyoulummac2
  • iseopolo.buzzfakeapp
  • doc.iseopolo.buzzfakeapp

URLs 11

  • https://api.github.com/repos/stamparm/maltrail/commits/e38b12175a16c6bdc95c984b507f741839b3277c0ktapus
  • https://api.github.com/repos/stamparm/maltrail/commits/90b8bc9ec80fcd23a05094516696f0e4208f4d9e0ktapus
  • https://x.com/t43cr0wl3r/status/20880342074780224750ktapus
  • https://api.github.com/repos/stamparm/maltrail/commits/586cd5d8d3fc198fe1e9a80b049e1a27ddc787e2lummac2
  • https://api.github.com/repos/stamparm/maltrail/commits/c71760d98290d44f63e5bab5edea66a6605cb1b9python_injector
  • https://x.com/Fact_Finder03/status/2088178962065457539python_injector
  • https://x.com/Fact_Finder03/status/2082782903671595048python_injector
  • https://www.virustotal.com/gui/file/390c896dd5f9d0a1708751d453d1b60bf2459b017bf829d3f1f3507933fef309/detectionpython_injector
  • https://www.virustotal.com/gui/file/1191426749c2f3a6e1c5dadf11ad8ce5bd2ae3225fe11103230112b5b9731669/detectionpython_injector
  • https://api.github.com/repos/stamparm/maltrail/commits/983d754f1dc1aa0cb79c838cadc3328d65e393bbfakeapp

IP addresses 7

  • 176.120.22.240ktapus
  • 193.24.123.690ktapus
  • 37.77.150.950ktapus
  • 91.202.233.1040ktapus
  • 91.215.85.1030ktapus
  • 91.215.85.220ktapus
  • 45.61.163.8python_injector

Community reviews

Loading reviews…