| 2026-08-21 07:53 | utuhv.cn | ValleyRAT | RAT ValleyRAT |  abuse_ch |
| 2026-08-21 07:53 | wwwvbcsajmj.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | xxnoyhngfg.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | etgul.cn | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:53 | hhwqascxsdr.cc | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.166.189.193:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.167.107.230:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 18.167.217.149:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 43.198.145.140:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 43.198.220.74:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 95.40.206.48:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:49 | 95.41.64.117:8080 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 07:46 | o2yen35b.en-en--xenburn.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 07:45 | en-en--xenburn.com | ClearFake | ClearFake |  threatcat_ch |
| 2026-08-21 07:38 | akmuniverstall.top | Unknown malware | OnyxC2 | abuse_ch |
| 2026-08-21 07:38 | https://akmuniverstall.top/backend/api/app.php | Unknown malware | OnyxC2 | abuse_ch |
| 2026-08-21 07:28 | manouchy.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 07:11 | https://krem.mesoptik.com/v3/telemetry | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | https://krem.mesoptik.com/v3/report | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | https://krem.mesoptik.com/ws/stealer | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:11 | krem.mesoptik.com | TELEPUZ | TELEPUZ | abuse_ch |
| 2026-08-21 07:00 | b5hhv7o8.crownconnectpk.com | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 06:59 | talos.com.br | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 06:57 | http://110.38.2.86:48915/Mozi.m | Mozi | elf IoT Mozi |  HoneyLabs |
| 2026-08-21 06:57 | http://39.34.140.102:40567/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:57 | http://153.117.38.146:46962/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:57 | 89.19.223.68:5555 | Aisuru | AISURU c2 |  Bitsight |
| 2026-08-21 06:57 | tomteboda1.se | IClickFix | | Anonymous |
| 2026-08-21 06:44 | myfitnessbox.be | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 06:33 | 147.189.169.192:8041 | Unknown RAT | ConnectWise rmm ScreenConnect | abuse_ch |
| 2026-08-21 06:12 | eng-aquaburn.us | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows |  Gi7w0rm |
| 2026-08-21 06:05 | ayesahrentacar.com | IClickFix | ClearFake ClickFix |  skocherhan |
| 2026-08-21 06:05 | bellaneek.googlemydesign.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | nettbutikk.radiograf.no | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | susantperkins.clientsitedemo.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | huvipuistokeidas.fi | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | ideagallery.co | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | soprisengineering.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | rightwinmedias.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | bishnoivillagesafari.co.in | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | summershairbraidings.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | nobleeventsandrentals.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | twc-recruitment.co.za | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | thebestclean.ro | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | corporateventcatering.co.uk | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | coastalclearwaterdelivery.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | hilamode.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | lfsd423.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | cdevitsol.shop | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | neoventiveinc.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | moveiseuropa.pt | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | pte-sa.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | fcmsafeservice.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | spacelab.com.co | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | windseyecapital.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | bridgecosmeticsurgeryvacation.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | safespacio.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | supremerivanapune.in | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | edukacjanaturalnie.eu | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | glx.br.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | j88t3.network | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | thabett.app | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | ssakranlaw.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | taxvisors.com.au | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | tdvm4q.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | snmm46.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | rzrms.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | texastreeauthority.com | IClickFix | ClearFake ClickFix | skocherhan |
| 2026-08-21 06:05 | 176.98.182.177:9034 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 43.129.180.120:34567 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 695ariela.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin |  xscon |
| 2026-08-21 06:05 | http://112.123.98.99:33747/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://110.38.0.239:35178/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://160.30.142.218:57634/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://202.47.57.186:45676/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://202.70.139.165:37412/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | 85.120.253.113:5000 | SectopRAT | 1xxbot ArechClient SectopRAT |  whoamix302 |
| 2026-08-21 06:05 | https://t.me/m1duus | Vidar | c2 Loader stealer Vidar | Bitsight |
| 2026-08-21 06:05 | rmm.fastmoneyclaim.com | Unknown RAT | ConnectWise ScreenConnect | Anonymous |
| 2026-08-21 06:05 | brlogic.biz | Remus | | skocherhan |
| 2026-08-21 06:05 | glooint.biz | Remus | | skocherhan |
| 2026-08-21 06:05 | orgjc7u140.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | fwgij17247.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | lojyny.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | http://125.44.18.27:46218/Mozi.m | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | http://153.117.40.47:46730/Mozi.a | Mozi | elf IoT Mozi | HoneyLabs |
| 2026-08-21 06:05 | 176.98.182.216:34567 | Aisuru | AISURU c2 | Bitsight |
| 2026-08-21 06:05 | 31.70.81.171:8808 | AsyncRAT | 8560 asyncrat c2 censys |  sojubear |
| 2026-08-21 06:05 | feculafi.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | vowycuxa.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | e4i5spo3yx.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-21 06:05 | 103.242.12.143:1234 | VShell | Vshell | Anonymous |
| 2026-08-21 06:05 | 113.44.89.87:3306 | Unknown malware | Viper | Anonymous |
| 2026-08-21 06:02 | fdl-ambassadeur.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:51 | hulywali.space | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-21 05:47 | 89g7yx01.en-biobooster.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 05:46 | acua-burn.com | ClearFake | 21August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-21 05:46 | unionswissnautic.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:44 | en-biobooster.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 05:30 | https://faceit-verification.help/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 05:09 | waescherei-leo.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | iptrade.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | mnmasonichomes.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | pgdbiz.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:09 | quarterreststudios.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:8080 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:80 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 113.44.89.87:443 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 106.54.41.209:9993 | Unknown malware | Viper | Anonymous |
| 2026-08-21 05:05 | 162.14.109.204:8080 | VShell | Vshell | Anonymous |
| 2026-08-21 04:52 | kqrfb2fo.congigenplus.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-21 04:50 | 202.61.85.172:7800 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 04:50 | 202.61.85.172:7811 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 04:49 | congigenplus.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 03:59 | rechsteiner-holzbau.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 03:51 | xbcuwv1m.defenseflashlight.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-21 03:50 | defenseflashlight.com | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 03:45 | 202.61.139.46:7800 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 03:45 | 202.61.139.46:7811 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-21 03:44 | gwgsl6k1.en-belly--flush.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 03:23 | pidorsas.site | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-21 03:05 | 211.101.235.94:8088 | VShell | Vshell | Anonymous |
| 2026-08-21 03:05 | 43.136.76.42:8080 | VShell | Vshell | Anonymous |
| 2026-08-21 03:00 | https://rblxgivex.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-21 01:59 | o7ve5wvj.cognigen-plus.net | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-21 01:57 | cognigen-plus.net | ClearFake | 21August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-21 01:44 | vrivcuff.en-americaneaglependant.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-21 01:43 | en-americaneaglependant.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-21 01:05 | 43.140.219.182:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 01:05 | 43.140.219.182:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-21 01:05 | 157.254.191.87:9999 | VShell | Vshell | Anonymous |
| 2026-08-21 01:04 | schiessgestaltung.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-21 00:54 | rblxgivex.com | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-21 00:43 | forecast-chaos.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:43 | sound-obstacle.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:43 | root-cherry.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-21 00:10 | http://zakuiru.shop:9048/transactions | Remus | Remus | abuse_ch |
| 2026-08-21 00:05 | 47.109.34.148:8084 | VShell | Vshell | Anonymous |
| 2026-08-21 00:04 | olviro.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:54 | chefvoyage.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:52 | 4vhdn6ve.cognigenpluss.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 23:48 | cognigenpluss.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 23:47 | 43.140.219.182:443 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-20 23:44 | c0jcfjcz.eloncod.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 23:42 | eloncod.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 23:42 | owxqk8og.dantilock.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 23:39 | dantilock.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 23:38 | verokase.xyz | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-20 23:24 | immorein-wyne.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:09 | susieleeforcongress.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 23:05 | 101.200.193.211:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 23:05 | 120.55.43.18:8000 | VShell | Vshell | Anonymous |
| 2026-08-20 23:00 | https://apartments-review261634860.sbs/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 22:40 | http://zakuiru.shop:9048/documents | Remus | Remus | abuse_ch |
| 2026-08-20 22:05 | 106.54.41.209:22 | Unknown malware | Viper | Anonymous |
| 2026-08-20 22:05 | 43.134.42.247:8080 | Havoc | Havoc | Anonymous |
| 2026-08-20 22:05 | 129.211.11.213:8443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 21:54 | tlvg.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 21:45 | isl4eo0i.echo--free.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 21:42 | echo--free.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 21:28 | seat-aviation.com | ClearFake | ClearFake ClickFix etherhiding | Anonymous |
| 2026-08-20 21:05 | 80.190.77.86:2004 | AsyncRAT | asyncrat | Anonymous |
| 2026-08-20 21:05 | 82.39.109.102:8090 | DCRat | dcrat | Anonymous |
| 2026-08-20 21:00 | https://ksr-racingparts.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 20:58 | v19k5zdn.cogniclyr.com | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-20 20:57 | cogniclyr.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 20:30 | https://www.accademiadeiromani.it/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 20:23 | iniziativadalasalps.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:5003 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 118.25.37.47:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 20:05 | 129.211.11.213:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:46 | 95.133.229.173:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 95.164.123.132:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:46 | 91.92.243.36:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 5.230.201.54:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 5.230.201.54:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:46 | 46.246.84.10:2703 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:45 | 45.141.215.40:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:45 | 31.59.137.166:56003 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.60.195.196:56001 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.60.195.196:56002 | PureRAT | drb-ra PureHVNC PureRAT RAT | abuse_ch |
| 2026-08-20 19:45 | 217.217.97.125:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:45 | i1i374tc.echo-fre.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 19:44 | 193.161.193.99:36731 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:44 | 172.86.113.226:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-20 19:43 | 159.203.69.210:4500 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 19:43 | 147.124.221.0:62020 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 19:41 | echo-fre.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 19:33 | scuolatao.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:33 | 39.105.174.162:48238 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 103.40.14.232:51923 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 154.36.158.127:18890 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 110.41.2.64:55558 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 47.238.112.8:50888 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:33 | 45.145.228.25:8889 | Unknown malware | Supershell | whoamix302 |
| 2026-08-20 19:31 | 62.60.227.108:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 89.124.124.62:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 193.24.211.108:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 31.76.87.103:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:31 | 212.43.156.248:9000 | SectopRAT | 1xxbot ArechClient SectopRAT | whoamix302 |
| 2026-08-20 19:30 | zlhmp377.burn-burnblend.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 19:29 | 38.190.225.79:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 91.92.241.19:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 87.121.217.100:4343 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.247.189.92:27821 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.43.14.52:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.107:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.153:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.119.98.162:33223 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.130.146.22:50050 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.111.143.242:2025 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 104.36.229.142:58003 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 83.106.88.18:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 45.112.194.41:4784 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 125.86.26.79:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.111.134.122:4040 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 98.142.250.238:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 94.26.68.54:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 185.44.64.196:4777 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 172.94.9.166:2232 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 80.97.160.224:2027 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 154.91.180.11:4782 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:29 | 194.59.31.36:8727 | Quasar RAT | CinaRAT Quasar RAT QuasarRAT Yggdrasil | whoamix302 |
| 2026-08-20 19:28 | burn-burnblend.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 19:26 | 85.11.167.198:57773 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 93.95.229.190:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 209.99.191.90:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 169.58.52.31:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 172.245.195.202:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.237.24.240:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.156.119.90:31338 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.154.43.213:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 2.27.62.226:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 46.8.101.202:61337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 49.232.170.10:29180 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 78.17.212.169:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 94.237.24.24:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 185.158.112.103:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 104.239.66.7:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 45.140.14.97:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 114.55.105.65:65229 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 182.255.44.231:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 18.136.148.19:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 23.94.252.82:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 69.48.228.147:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 169.58.5.199:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 103.183.74.235:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 156.225.21.226:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 182.255.91.104:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 91.92.42.238:37773 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 89.125.209.103:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 163.172.45.158:6789 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 144.172.102.147:39182 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 46.8.228.101:31337 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:26 | 185.18.222.97:31866 | Sliver | sliver | whoamix302 |
| 2026-08-20 19:24 | 45.61.180.161:56001 | PureRAT | PureHVNC PureRAT ResolverRAT | whoamix302 |
| 2026-08-20 19:24 | 104.249.10.86:56003 | PureRAT | PureHVNC PureRAT ResolverRAT | whoamix302 |
| 2026-08-20 19:23 | 45.154.98.38:8808 | AsyncRAT | asyncrat | whoamix302 |
| 2026-08-20 19:23 | 216.250.252.108:6680 | AsyncRAT | asyncrat | whoamix302 |
| 2026-08-20 19:13 | apartments-review261634860.sbs | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-20 19:13 | osuna.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:13 | dbagroup.cl | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 19:05 | 129.211.11.213:8888 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 129.211.11.213:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 124.221.47.107:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:05 | 124.221.47.107:8080 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 19:03 | fdl-int.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:50 | http://cleasion.click:8202/reviews | Remus | Remus | abuse_ch |
| 2026-08-20 18:50 | 31.97.119.76:8202 | Remus | RemusStealer | abuse_ch |
| 2026-08-20 18:49 | zto37lic.blenzador.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 18:48 | blenzador.com | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 18:45 | https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=YmbK | Vidar | Vidar | abuse_ch |
| 2026-08-20 18:45 | https://62.238.46.160 | Vidar | Vidar | abuse_ch |
| 2026-08-20 18:43 | aiuti.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:43 | longhibau.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:40 | http://zakuiru.shop:9048/exports | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://vexdico.shop:8539/messages | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://palaera.click:7242/contacts | Remus | Remus | abuse_ch |
| 2026-08-20 18:40 | http://kupzovo.shop:7567/folders | Remus | Remus | abuse_ch |
| 2026-08-20 18:33 | pomarus.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:33 | medstar.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:32 | ksr-racingparts.com | IClickFix | ClickFix fake-plugin |  varysz |
| 2026-08-20 18:13 | yourcapital.co.za | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | zeilberger-hartl.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.saema.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.salam-med.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.stengel-immobilienservice.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.tecnomecc.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.the-speech-house.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.thejokedealers.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.weddart.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | yduocdanang.edu.vn | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.kapowschool.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.karl-koenig-schule.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.luke4meridian.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.luracast.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.magicpropertyleads.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.nexuspublishing.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.poemsaboutmydeath.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.polsteraktuell.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.ckig-energy.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.completehomeopathy.co.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.crawfordvillage.uk | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.dcreport.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.duepiani.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.echelog.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.eli.org.il | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.executivehairadditions.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.glispazzacamino.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.heartlinesliterarymagazine.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.iac-md.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.imec.africa | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | upstate.press | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | usclaimssolutions.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | vaclavklema.cz | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | vfr-kesselstadt.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | wisedrywall.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | writingjobspot.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.accademiadeiromani.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.accessladdersuk.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.azazel.pl | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.bethelveterinary.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.bookatl.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.build.4yourinfo.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | www.caffechirico.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | nepajunkremoval.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | novopren.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | nuba.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | peopletraq.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | physiciancareerplanning.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | preprod.eglisealbi.fr | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | selflove.hayaalkhalifa.co | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | surgeortho.co.za | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | taiwanmcm.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | tecnifarch.multisite.tecnifar.neev.tech | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | thetabchurch.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | unicharmpet.co.id | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | isaincucina.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | jennasrainbow.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | judahcompany.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | lalla-essaouira.marocboutons.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | loinc.org.tw | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | louwalkercenter.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mandala-net.bestmarketing.website | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | marketgrandrapids.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | meeresbrandung.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | metroceramics.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | milmurales.cl | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | moreliferecoverycenter.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mycomeal.sec.ventures | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | mysite.web3namibia.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | comedyconnection.net | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | confidence.itecnifar.pt | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | cortinatgesesteba.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | cutaxyl.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | demo.fcuece.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | development.icgruppen.se | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | doc-hino.onelink-iot.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | engratitud.com.izi.xjw.temporary.site | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | expresskasse.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fcuaa.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fondazionetriulza.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | icdcs2023.icdcs.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | iffd.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | academia.imoney.com.do | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | al-marri.partners | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | altamareaseatours.it | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | azchristianschools.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | baekho.de | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | campaign.parquet.co.il | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | catharinelumby.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 18:13 | fundacioanaribot.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | 1to1meet.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | selloranges.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | kancelarijaristovic.rs | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | remarkabletech.co.nz | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | premiegarage.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | powerpluspro.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | parquet.co.il | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | eye-com.net | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:13 | steampunksalpha.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:05 | 124.221.47.107:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 124.221.47.107:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 118.25.37.47:443 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:05 | 118.25.37.47:22 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 18:03 | cruiserandco.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:03 | restaurantsawadika.ca | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 18:03 | nadiaspeaks.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 17:42 | a8ps09r7.easybatteryfixed.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 17:41 | easybatteryfixed.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 17:30 | https://psicopress.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 17:26 | blog.myfit.ai | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:26 | blog.unikas.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:26 | binaprogram.org | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:23 | adfox.ai | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:22 | amb-aero.com | IClickFix | ClickFix etherhiding nochain | varysz |
| 2026-08-20 17:05 | 103.185.249.199:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 17:05 | 118.25.37.47:80 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 17:05 | 8.156.69.245:8084 | VShell | Vshell | Anonymous |
| 2026-08-20 17:05 | 106.54.41.209:10001 | Unknown malware | Viper | Anonymous |
| 2026-08-20 17:05 | 106.54.41.209:8080 | Unknown malware | Viper | Anonymous |
| 2026-08-20 16:53 | implexions.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 16:53 | first-point.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 16:47 | 95.164.123.132:53105 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 95.164.123.132:56545 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 95.164.123.132:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.92.47.94:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.92.47.94:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.124.98.25:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:47 | 91.124.98.25:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:46 | 45.141.215.40:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:46 | 217.217.97.125:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:45 | 213.152.186.188:32605 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:45 | 213.152.186.188:32635 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:44 | 192.109.139.69:7443 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:44 | 192.109.139.69:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:43 | 104.168.70.163:7080 | HypeAgent | drb-ra HypeAgent | abuse_ch |
| 2026-08-20 16:34 | kestrelgable.top | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:30 | vdyhrgylv.bio--booster.com | ClearFake | ClearFake win-0xa770 Windows | Anonymous |
| 2026-08-20 16:30 | sedgeoriel.co | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:29 | https://sedgeoriel.co/version/secure-json.js | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:15 | 156.234.7.46:443 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-20 16:14 | boepk30823.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 16:08 | 207.56.137.45:9245 | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:08 | hype.activeworkshops.com | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:07 | https://hype.activeworkshops.com:9245/hype/ws | HypeAgent | HypeAgent | abuse_ch |
| 2026-08-20 16:07 | copperreliquary.info | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:06 | https://copperreliquary.info/version/secure-json.js | SmartApeSG | SmartApeSG | varysz |
| 2026-08-20 16:05 | 106.54.41.209:21119 | Unknown malware | Viper | Anonymous |
| 2026-08-20 16:05 | 178.156.181.26:7443 | Unknown malware | Mythic | Anonymous |
| 2026-08-20 16:02 | paton-welding.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 15:56 | 41csh0wo.en-usa-sugarmute.us | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-20 15:50 | 156.234.7.60:433 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-20 15:45 | 121.127.253.206:8868 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-08-20 15:33 | 86n1btn0.eng--slimsounds.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 15:30 | https://zaeroks.website/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 15:30 | https://einfach-einfach.digital/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 15:21 | f4vyboeo.burnblendmarket.com | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 15:18 | burnblendmarket.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 15:10 | montoiro.lol | KongTuke | Kongtuke |  monitorsg |
| 2026-08-20 15:10 | https://montoiro.lol/api/v1/verify | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 15:10 | https://montoiro.lol/api/v1/session | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 15:10 | https://montoiro.lol/api/v1/status | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 15:10 | https://sheltercirrus.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/oo9/update | IClickFix | | Efren |
| 2026-08-20 15:10 | https://grove-satin.com/api/metrics/run?event=pasted | IClickFix | | Efren |
| 2026-08-20 15:10 | https://filevegatech.com | IClickFix | | Efren |
| 2026-08-20 15:05 | 106.54.41.209:55566 | Unknown malware | Viper | Anonymous |
| 2026-08-20 15:05 | 106.54.41.209:443 | Unknown malware | Viper | Anonymous |
| 2026-08-20 15:05 | 106.54.41.209:80 | Unknown malware | Viper | Anonymous |
| 2026-08-20 15:05 | 106.54.41.209:60000 | Unknown malware | Viper | Anonymous |
| 2026-08-20 14:50 | clavee202620262026final.duckdns.org | AsyncRAT | asyncrat | abuse_ch |
| 2026-08-20 14:47 | pqcabzbeb.bio--booster.com | ClearFake | ClearFake win-0xa770 Windows | Anonymous |
| 2026-08-20 14:45 | ftp.untentepc.info | Agent Tesla | AgentTesla | abuse_ch |
| 2026-08-20 14:40 | 84.38.133.144:9090 | XWorm | XWorm | abuse_ch |
| 2026-08-20 14:32 | http://2.26.136.128/twget.sh | Unknown malware | Dropper |  moldy |
| 2026-08-20 14:32 | seprinto.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 14:32 | http://45.150.195.235/twget.sh | Unknown malware | Dropper | moldy |
| 2026-08-20 14:32 | http://115.41.97.143:65419/lvn3/eU | Unknown malware | Dropper | moldy |
| 2026-08-20 14:32 | tftp://115.41.97.143:69/yCz31g9 | Unknown malware | Dropper | moldy |
| 2026-08-20 14:32 | ftp://185.93.89.72/ftpget | Unknown malware | Dropper | moldy |
| 2026-08-20 14:32 | tftp://185.93.89.72:69/tftp | Unknown malware | Dropper | moldy |
| 2026-08-20 14:22 | janathadiagnostics.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 14:17 | http://kerosand.net:3847/api/agent/script | Unknown malware | | Anonymous |
| 2026-08-20 14:10 | bdwjk37712.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 14:10 | guirreiro.lol | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 14:10 | https://guirreiro.lol/api/v1/session | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 14:10 | post-ld.pgcountyliving.com | FAKEUPDATES | SocGholish | monitorsg |
| 2026-08-20 14:10 | https://guirreiro.lol/api/v1/verify | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 14:10 | https://guirreiro.lol/api/v1/status | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 14:10 | 143.246.216.114:38990 | Pink | Pink | Bitsight |
| 2026-08-20 14:05 | 80.190.77.86:2222 | AsyncRAT | asyncrat | Anonymous |
| 2026-08-20 14:05 | 202.61.130.163:8888 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-20 14:00 | https://fibre-industries.de/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 13:52 | monitor9.easttrail5.xyz | RevStealer | RevStealer |  Myrtus0x0 |
| 2026-08-20 13:50 | zaeroks.website | ClearFake | ClearFake ClickFix ErrTraffic etherhiding | Anonymous |
| 2026-08-20 13:49 | a9uyb2p4.bldarmor.com | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 13:47 | bldarmor.com | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 13:46 | achofree.com | ClearFake | 20August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-20 13:31 | s9ufafpx.digeststart.us | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 13:30 | https://serve2lead.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 13:27 | souestacao.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | urbanorurale.it | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | ankamea.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | city-ihl.net | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | einfach-einfach.digital | Unknown malware | ClickFix compromised | Anonymous |
| 2026-08-20 13:27 | coussot-bois-energie.fr | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | menegon.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | flyro.es | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | sketsakita.store | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | trmmfg.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | tiaffe.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | diyafoundation-india.org | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | dolospedifen.ch | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:27 | houseofhopehousinginc.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 13:15 | http://31.77.228.40/ | Stealc | c2 Loader NEWTEST Stealc stealer | Bitsight |
| 2026-08-20 13:15 | v7gmf2o66w.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 13:15 | 87.199.197.84:5000 | RevC2 | | Anonymous |
| 2026-08-20 13:15 | c1c6011ad508835c5f06c76f8957c7ac5dd6525ff5f85b95e50e56cf0b594448 | Mirai | elf IoT | HoneyLabs |
| 2026-08-20 13:14 | http://91.92.47.97/bins/wget.sh | Mirai | elf IoT | HoneyLabs |
| 2026-08-20 13:14 | v3ns8x739p.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 13:14 | http://178.16.52.8/ | Stealc | c2 Loader Stealc stealer test_2 | Bitsight |
| 2026-08-20 13:14 | https://anguiano.study/api/v1/status | KongTuke | Kongtuke | monitorsg |
| 2026-08-20 13:05 | 202.61.130.163:8080 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-20 13:05 | 202.61.130.163:80 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-20 13:05 | 202.61.130.163:443 | AdaptixC2 | Adaptix | Anonymous |
| 2026-08-20 13:05 | 38.190.196.19:8082 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 12:51 | https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4 | Unknown Stealer | stealer |  dyingbreeds_ |
| 2026-08-20 12:50 | 104.239.66.83:1804 | STRRAT | STRRAT | abuse_ch |
| 2026-08-20 12:45 | 45.141.148.10:4001 | XWorm | XWorm | abuse_ch |
| 2026-08-20 12:42 | serve2lead.com | ClearFake | ClearFake ClickFix compromised etherhide etherhiding | Anonymous |
| 2026-08-20 12:42 | fibre-industries.de | ClearFake | ClearFake ClickFix compromised etherhide etherhiding | Anonymous |
| 2026-08-20 12:30 | sakti188jp.com | ClearFake | 20August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-20 12:23 | http://noveclo.click:8654/subscriptions | Remus | Remus | Myrtus0x0 |
| 2026-08-20 12:23 | http://cleasion.click:8202/sessions | Remus | Remus | Myrtus0x0 |
| 2026-08-20 12:05 | 80.190.77.86:2000 | AsyncRAT | asyncrat | Anonymous |
| 2026-08-20 11:47 | 185.92.190.174:8896 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-08-20 11:30 | https://freedomfamiliesfoundation.org/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-08-20 11:29 | oaq1h9w2.crownconnectpk.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 11:08 | sie5uyp7.brn-peak.net | ClearFake | ClearFake mac-0x0f14 macOS | Anonymous |
| 2026-08-20 11:07 | brn-peak.net | ClearFake | 20August2026 ClearFake Commandline macOS | Gi7w0rm |
| 2026-08-20 10:56 | lslmt39k.app8k.xyz | ClearFake | ClearFake mac-0xdcf2 macOS | Anonymous |
| 2026-08-20 10:45 | eskacangtvri.com | ClearFake | 20August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-20 10:05 | 80.190.77.86:8808 | AsyncRAT | asyncrat | Anonymous |
| 2026-08-20 10:05 | 8.137.98.198:8089 | VShell | Vshell | Anonymous |
| 2026-08-20 10:05 | 180.76.172.229:8084 | VShell | Vshell | Anonymous |
| 2026-08-20 10:03 | freedomfamiliesfoundation.org | ClearFake | ClearFake ClickFix compromised etherhide etherhiding | Anonymous |
| 2026-08-20 10:02 | bulan77.online | ClearFake | 20August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-20 09:46 | 82.197.65.206:7443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-08-20 09:46 | 80.190.77.86:1000 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 09:46 | 80.190.77.86:8008 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 09:46 | 4.193.136.143:443 | Havoc | drb-ra Havoc | abuse_ch |
| 2026-08-20 09:43 | 109.227.40.60:4433 | DanaBot | DanBot drb-ra | abuse_ch |
| 2026-08-20 09:43 | 104.243.248.63:84 | AsyncRAT | asyncrat drb-ra RAT | abuse_ch |
| 2026-08-20 09:36 | yoasistente.com | ClearFake | 20August2026 ClearFake Commandline DomainShadowing Windows | Gi7w0rm |
| 2026-08-20 09:32 | 88hma9a9.gtacauto.com | ClearFake | ClearFake mac-0x68dc macOS | Anonymous |
| 2026-08-20 09:29 | 62.238.98.35:443 | Vidar | Vidar |  crep1x |
| 2026-08-20 09:29 | 62.238.106.96:443 | Vidar | Vidar | crep1x |
| 2026-08-20 09:29 | 2.29.13.241:443 | Vidar | Vidar | crep1x |
| 2026-08-20 09:29 | 2.29.7.186:443 | Vidar | Vidar | crep1x |
| 2026-08-20 09:29 | 158.94.210.96:443 | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | ryr.1131gg.org | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | guc.1131gg.org | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | ses.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | nhg.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | ges.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | kra.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | brr.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | sto.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | rex.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | bib.sm188daftar.mom | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | guc.sm188dnsx.top | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://brr.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://sto.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://rex.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://bib.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://ses.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://nhg.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://ges.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://kra.sm188daftar.mom/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://62.238.106.96/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://2.29.13.241/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://2.29.7.186/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://158.94.210.96/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://ryr.1131gg.org/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:28 | https://guc.1131gg.org/ | Vidar | Vidar | crep1x |
| 2026-08-20 09:05 | 43.226.40.204:9443 | VShell | Vshell | Anonymous |
| 2026-08-20 09:05 | 43.134.42.247:22 | Havoc | Havoc | Anonymous |
| 2026-08-20 09:05 | 43.134.42.247:443 | Havoc | Havoc | Anonymous |
| 2026-08-20 09:05 | 116.205.106.137:9997 | VShell | Vshell | Anonymous |
| 2026-08-20 09:05 | 103.185.249.199:5003 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 09:03 | 169.58.75.138:8000 | Unknown malware | CONTABO CTFLoaderService FakeAdobe iso LNK pre-ransomware velociraptor | Anonymous |
| 2026-08-20 09:02 | basecodereset.com | IClickFix | | Anonymous |
| 2026-08-20 09:02 | approvalrequest-api.com | IClickFix | | Anonymous |
| 2026-08-20 09:02 | a16ee9fb562ceae9db13a9e6e683d2c6 | Cobalt Strike | | Anonymous |
| 2026-08-20 09:02 | https://d34auolpreyu24.cloudfront.net/jquery-3.3.1.min.js | Cobalt Strike | | Anonymous |
| 2026-08-20 09:02 | 124.221.146.23:8000 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-08-20 09:02 | 199.187.25.93:8080 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-08-20 08:54 | https://20.6.97.231/async/newtab_promos | Cobalt Strike | | Anonymous |
| 2026-08-20 08:54 | https://20.6.97.231/async/ddljson | Cobalt Strike | | Anonymous |
| 2026-08-20 08:54 | https://20.6.97.231/async/newtab_ogb | Cobalt Strike | | Anonymous |
| 2026-08-20 08:54 | https://20.6.97.231/service/update2/json | Cobalt Strike | | Anonymous |
| 2026-08-20 08:54 | https://20.6.97.231/gen_204 | Cobalt Strike | | Anonymous |
| 2026-08-20 08:50 | 51amiyqh.biodenttix.us | ClearFake | ClearFake mac-0x76c7 macOS | Anonymous |
| 2026-08-20 08:48 | http://gofkaxz.click:8137/transactions | Remus | Remus | Myrtus0x0 |
| 2026-08-20 08:48 | http://tokjoza.shop:5200/posts | Remus | Remus | Myrtus0x0 |
| 2026-08-20 08:48 | https://ntc-redirect.akamai-live.workers.dev/compare/v1.44/ | Cobalt Strike | | Anonymous |
| 2026-08-20 08:48 | a.bc.285ef6f2.web.mail.cargopaa.com | Cobalt Strike | | Anonymous |
| 2026-08-20 08:47 | biodenttix.us | ClearFake | ClearFake | threatcat_ch |
| 2026-08-20 08:41 | qibanopy.workers.dev | php.shin_webshell | Cloudflare gif PHP webshell WordPress workers.dev wp-admin | xscon |
| 2026-08-20 08:41 | 9f0c756af7f4a15a6e801aeb364a832d | Cobalt Strike | | Anonymous |
| 2026-08-20 08:41 | 33215eef229fa578661e017862dbca09c9d9d0a2d19ff56e0622604c804c7ebe | Cobalt Strike | | Anonymous |
| 2026-08-20 08:30 | api.rh7.ninja | Sliver | sliver | abuse_ch |
| 2026-08-20 08:23 | 217.60.102.8:2269 | Remcos | RAT RemcosRAT | abuse_ch |
| 2026-08-20 08:19 | 195.177.94.61:2404 | Remcos | RAT RemcosRAT | abuse_ch |
| 2026-08-20 08:17 | http://broadswordcallingdannyboy.com:4219 | Remus | Remus | Myrtus0x0 |
| 2026-08-20 08:15 | 89.106.83.41:55550 | Remcos | RAT RemcosRAT | abuse_ch |
| 2026-08-20 08:10 | onboarding.radiantfluxstudio.com | Remcos | remcos | abuse_ch |
| 2026-08-20 08:06 | 46.151.182.93:9090 | Remcos | remcos | abuse_ch |
| 2026-08-20 08:06 | 194.59.31.98:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 38.240.40.231:2404 | Remcos | remcos | abuse_ch |
| 2026-08-20 08:06 | 169.58.169.10:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 15.204.115.143:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 151.243.109.130:9239 | Remcos | remcos | abuse_ch |
| 2026-08-20 08:05 | digitalhoster.4nmn.com | Remcos | remcos | abuse_ch |
| 2026-08-20 08:05 | range2021.kozow.com | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:05 | bokiass.noip.at | Remcos | remcos | abuse_ch |
| 2026-08-20 08:05 | 4.193.136.143:3389 | Havoc | Havoc | Anonymous |
| 2026-08-20 08:05 | 4.193.136.143:80 | Havoc | Havoc | Anonymous |
| 2026-08-20 08:05 | 103.185.249.199:8081 | Cobalt Strike | CobaltStrike | Anonymous |
| 2026-08-20 08:05 | 4.193.136.143:22 | Havoc | Havoc | Anonymous |
| 2026-08-20 08:01 | fibre-industries.de | ClearFake | compromised etherhide | Anonymous |
| 2026-08-20 08:01 | freedomfamiliesfoundation.org | ClearFake | compromised etherhide | Anonymous |