Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-05-11

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 77

  • testerlau.latUnknown Webinject payload delivery domain (confidence level: 100%)
  • cooltool.jp.netAsyncRAT botnet C2 domain (confidence level: 75%)
  • holidayonid.com.coAsyncRAT botnet C2 domain (confidence level: 75%)
  • app.qq8893.comAsyncRAT botnet C2 domain (confidence level: 75%)
  • 2mdj56rl.sa.comQuasar RAT botnet C2 domain (confidence level: 75%)
  • lankbos.nlQuasar RAT botnet C2 domain (confidence level: 75%)
  • x88-km88k.comQuasar RAT botnet C2 domain (confidence level: 75%)
  • x88.diyQuasar RAT botnet C2 domain (confidence level: 75%)
  • subsieuvip9.comQuasar RAT botnet C2 domain (confidence level: 75%)
  • u888n.infoNanocore RAT botnet C2 domain (confidence level: 75%)

URLs 49

  • https://aeroflexsealing.com/Vidar payload delivery URL (confidence level: 75%)
  • https://steamcommunity.com/profiles/76561198706525776Vidar botnet C2 (confidence level: 100%)
  • https://telegram.me/b9te3iVidar botnet C2 (confidence level: 100%)
  • https://ehj.loniluekegerman.com/Vidar botnet C2 (confidence level: 100%)
  • https://mpd.loniluekegerman.com/Vidar botnet C2 (confidence level: 100%)
  • https://88.198.103.89/Vidar botnet C2 (confidence level: 100%)
  • https://88.198.103.91/Vidar botnet C2 (confidence level: 100%)
  • https://178.63.30.143/Vidar botnet C2 (confidence level: 100%)
  • https://178.63.30.62/Vidar botnet C2 (confidence level: 100%)
  • https://88.198.103.95/Vidar botnet C2 (confidence level: 100%)

IP addresses 75

  • 104.168.5.18XWorm botnet C2 server (confidence level: 75%)
  • 192.3.171.227XWorm botnet C2 server (confidence level: 75%)
  • 130.12.182.209AsyncRAT botnet C2 server (confidence level: 75%)
  • 137.184.38.192AsyncRAT botnet C2 server (confidence level: 75%)
  • 144.91.78.57Remcos botnet C2 server (confidence level: 75%)
  • 158.94.210.70AsyncRAT botnet C2 server (confidence level: 75%)
  • 168.222.97.106AsyncRAT botnet C2 server (confidence level: 75%)
  • 172.239.57.52AdaptixC2 botnet C2 server (confidence level: 75%)
  • 172.245.97.237Evilginx botnet C2 server (confidence level: 75%)
  • 185.212.128.76Evilginx botnet C2 server (confidence level: 75%)

Description

ThreatFox IOCs for 2026-05-11

Community reviews

Loading reviews…