ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'113

IOCs shared (past 24 hours)

Unknown malware

Most seen malware family (past 24 hours)

1'690'234

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-04-25 14:40http://45.77.60.153/%2BU2QpCWLB0TeEK0Y%2BTHl1Q%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-25 14:40http://217.69.8.40/63RbXCmTBoPZhfyuqUsNdA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-25 14:40http://45.77.60.153/get_arhive_npm/zi2WMapzCnO8eV9QY%2BQQXQ%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-25 14:40http://45.77.60.153/darwin-universal/s4%2BECczuPY7jRKr7qbsMng%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-25 14:40http://217.69.8.40/get_arhive_npm/jCbp9cVu%2B%2B%2FczOTwvXfJbQ%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-25 14:40http://45.77.60.153/darwin-universal/s4%2BECczuPY7jRKr7qbsMng%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-25 14:40http://217.69.8.40/darwin-universal/WJcjmFcy4f4SxNGlL5o0cQ%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-25 14:40http://217.69.8.40/darwin-universal/WJcjmFcy4f4SxNGlL5o0cQ%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-25 14:40http://45.32.150.251/g/63RbXCmTBoPZhfyuqUsNdA%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.2.135/3pkV2PhdSee7rIYT7tUUvg%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/G5siNiDTBkWodwfsMxkn1g%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.3.51/lzgWdJKan%2FG2wWN78uuGzg%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.2.135/get_arhive_npm/vpqzcu4AQPB45ixRc6EgCA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/get_arhive_npm/TF3wpi1E5Y1y%2B6LY7%2FZj5g%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.3.51/get_arhive_npm/7j0r9Ddsx6iIfveCYMyduQ%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/get_arhive_npm/RO8nMC3fFOvjr3hxw3Q6QQ%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.2.135/darwin-universal/olPDwN6o4fVo56us9X3T%2Fw%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.2.135/darwin-universal/olPDwN6o4fVo56us9X3T%2Fw%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/darwin-universal/jxtVf%2FFuCZJpmxpd7Kf4eA%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/darwin-universal/jxtVf%2FFuCZJpmxpd7Kf4eA%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/darwin-universal/Lm8NJsV%2BCj5VQM2fKlZmng%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/darwin-universal/Lm8NJsV%2BCj5VQM2fKlZmng%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.3.51/darwin-universal/1%2FtD%2F6d9ykFdWb6axInO%2Bg%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.3.51/darwin-universal/1%2FtD%2F6d9ykFdWb6axInO%2Bg%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-22 11:26http://217.69.3.51/g/lzgWdJKan%2FG2wWN78uuGzg%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-22 11:26http://45.32.150.251/g/G5siNiDTBkWodwfsMxkn1g%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-16 05:22http://217.69.0.159/get_encrypt_file_exe/AIgcaBsOKY4l4R4DMN5Caw== GlassWormglassworm Wave3 tipo_deincognito
2026-04-16 05:22http://217.69.0.159/get_arhive_npm/CaZPVvNsQfLDx9O6QbxOnw== GlassWormglassworm Wave3 tipo_deincognito
2026-04-16 05:22http://217.69.3.152:80/log GlassWormexfil glassworm Wave3 tipo_deincognito
2026-04-16 05:22http://45.32.150.251/get_encrypt_file_exe/Uj+ZA5DGnVUc9s8ezel5NQ== GlassWormglassworm Wave3 tipo_deincognito
2026-04-16 05:22http://45.32.150.251/get_arhive_npm/1hSS+kiByorP8+9JrXLvgg== GlassWormglassworm Wave3 tipo_deincognito
2026-04-15 18:18http://217.69.2.135/HUWe6R8FWrnq2XaXMjonzA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-15 18:18http://217.69.3.51/lYc8y7qfNjkARpt8FxAZsw%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-15 18:18http://217.69.2.135/get_arhive_npm/Zkew%2F1gS%2Bd7eUQ5NwZThvg%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-15 18:18http://217.69.2.135/darwin-universal/%2BOEP1WW19zry7L%2BAIfWfow%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-15 18:18http://217.69.2.135/darwin-universal/%2BOEP1WW19zry7L%2BAIfWfow%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-11 19:37http://45.32.150.251/DcBgkhPhBl%2FI%2B47SkwikzA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-11 19:37http://45.32.150.251/get_arhive_npm/oQrcBH156bazw%2BWDRT0eMA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-11 19:37http://45.32.150.251/darwin-universal/eS7NGXnATAMvSxCvb5IR1w%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-11 19:37http://45.32.150.251/darwin-universal/eS7NGXnATAMvSxCvb5IR1w%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-11 19:37http://45.32.150.251/g/DcBgkhPhBl%2FI%2B47SkwikzA%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-11 19:37http://217.69.3.51/g/DcBgkhPhBl%2FI%2B47SkwikzA%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-11 07:05http://45.32.150.251/XKyC3JX9eluVo5oGMEXLwA%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-11 07:05http://45.32.150.251/get_arhive_npm/Z10KcBFWoM6mkfsrhxFK0Q%3D%3D GlassWormglassworm Wave3 tipo_deincognito
2026-04-11 07:05http://45.32.150.251/darwin-universal/SBR1JxtWvuFVrHEtLeRDLA%3D%3D?wallet=trezor GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-11 07:05http://45.32.150.251/darwin-universal/SBR1JxtWvuFVrHEtLeRDLA%3D%3D?wallet=ledger GlassWormglassworm wallet-trojan Wave3 tipo_deincognito
2026-04-09 12:46http://217.69.2.135/rN9%2F90aN08IATibnd7txcA%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 12:46http://45.32.150.251/g/CuSix1P76JsOJIk7kBp9Sg%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-09 12:46http://217.69.3.51/89L%2F%2B0zp1K9vaMRyLKJcwQ%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 12:46http://45.32.150.251/CuSix1P76JsOJIk7kBp9Sg%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 12:46http://217.69.3.51/g/89L%2F%2B0zp1K9vaMRyLKJcwQ%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-09 12:46http://217.69.2.135/get_arhive_npm/6YQMRzWLe2Xz1cFMLFEC9Q%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 12:46http://217.69.3.51/get_arhive_npm/B6krsSuUkEYBUqrxN3%2BasQ%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 12:46http://45.32.150.251/get_arhive_npm/NbYBPxIy9ZbwhalNq5L9KA%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 05:18http://217.69.2.135/N0K2pzQQzJes1CvLVcxy4A%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 05:18http://217.69.3.51/YFyq24tpV5X3al8CthpMpQ%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 05:18http://45.32.150.251/1Y4WLrpIxyti%2FGLsMk%2FG5A%3D%3D GlassWormglassworm solana-c2 Wave3 tipo_deincognito
2026-04-09 05:18http://45.32.150.251/g/1Y4WLrpIxyti%2FGLsMk%2FG5A%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-09 05:18http://217.69.3.51/g/YFyq24tpV5X3al8CthpMpQ%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-09 05:18http://217.69.2.135/get_arhive_npm/ieBDXRPfj6hlkPCyIyrLAw%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 05:18http://45.32.150.251/get_arhive_npm/ma3yj64bgLp%2Ffuh1k0a4cA%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 05:17http://217.69.3.51/get_arhive_npm/18xAz0gOR14htecQZyzXIA%3D%3D GlassWormarchive glassworm Wave3 tipo_deincognito
2026-04-09 05:1759221aa9623d86c930357dba7e3f54138c7ccbd0daa9c483d766cd8ce1b6ad26 GlassWormjavascript npm-supply-chain Wave3 Lenny_3BO
2026-04-09 05:17731c63cfd9a540a588737de5cf7fb8261e4fef7bc7a9b69fe32afee28932e940 GlassWormallaple code-synthesis Wave3 Worm Lenny_3BO
2026-04-09 05:1745552a3670e52f13df24b403a8d450b592b556bea9e3343e7d38cd3e0921743d GlassWormjavascript npm-supply-chain Wave3 Lenny_3BO
2026-04-06 18:49http://217.69.2.135/jy0FbN0y0Pcv2yQ0WtgG9w%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://217.69.3.51/iX%2B3AQBUlXMclYYlBqLD7Q%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://45.32.150.251/L9U0rBKRgjy0qqieRebNAw%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://45.32.150.251/g/L9U0rBKRgjy0qqieRebNAw%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://45.32.150.251/get_arhive_npm/0tfFcIxhAT5smMpJ2RAOlg%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://217.69.3.51/g/iX%2B3AQBUlXMclYYlBqLD7Q%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://217.69.2.135/get_arhive_npm/gXsONK0cYBWd7YuhpXcg0Q%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 18:49http://217.69.3.51/get_arhive_npm/WA3ysHW6zUAM8nls3ryD5g%3D%3D GlassWormglassworm tipo_deincognito
2026-04-06 07:56http://45.32.150.251/GAFeR0HAD88VN1dlTvuTXA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:56http://45.32.150.251/M%2F7UsvZ%2F5IgfbDBlNPcXwA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:56http://45.32.150.251/g/GAFeR0HAD88VN1dlTvuTXA%3D%3D GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-06 07:56http://45.32.150.251/get_arhive_npm/7sT9zWAqyqI0lM82yT8JDg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:56http://45.32.150.251/get_arhive_npm/qDiJ1Z4akTFClzs540AXfA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:562ba01d4141fce7342a7f0cc330e6c08da83cfe5d4bfd1a79b69f20d2b1f4f7e5 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-04-06 07:55http://217.69.2.135/XG%2Fyg77dIoRO%2BETTIhyMnw%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:55http://217.69.3.51/WckE9Mpy8bmesgj8EQjpXg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:55http://217.69.2.135/get_arhive_npm/eidiLPgbfTrK%2BvnooCNXwA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-06 07:55http://217.69.3.51/get_arhive_npm/LMTNiVUlATw34RQi2jrf1Q%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-04 07:11http://217.69.2.135/get_arhive_npm/nOquvjRpCd%2FsADyFqeGQtQ%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-04 07:11http://217.69.3.51/get_arhive_npm/YMLAUac6b7GlJUrHk4vxHA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-04 07:11https://calendar.app.google/CcqGmLkERzV6kDa28 GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-04-04 07:11http://217.69.2.135/CZW8qtpLZObJpuSkaGebRA%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-04 07:11http://217.69.3.51/K6iopyYvkyPx6R2fd5c6%2Fg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-04-01 05:01217.69.2.135:5000 GlassWormchrome-extension glassworm Wave3 tipo_deincognito
2026-03-27 07:06http://45.32.150.251/KKnPnNrivhFdfhiMCPe40A%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-27 07:06http://217.69.3.51/KKnPnNrivhFdfhiMCPe40A%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-27 07:06http://217.69.3.51/NrIgZ6I%2BFyCxXHb%2B9FapRg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-27 07:06http://217.69.2.135/NrIgZ6I%2BFyCxXHb%2B9FapRg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-27 07:06http://45.32.150.251/wBienbSMCQVw7hVbXv2RZg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-27 07:06http://217.69.3.51/wBienbSMCQVw7hVbXv2RZg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:59http://45.32.150.251/niJjiverQDmWmCuyRWx4hQ%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:5945.32.150.251:4787 GlassWormglassworm RAT Wave3 tipo_deincognito
2026-03-26 14:59http://45.32.150.251/R9Zc5gmlYM%2FhY1HWN6Obyg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:59http://45.32.150.251/g/R9Zc5gmlYM%2FhY1HWN6Obyg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:59http://217.69.3.51/niJjiverQDmWmCuyRWx4hQ%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:59http://208.85.20.124/p2p GlassWormEXFILTRATION glassworm infostealer Wave3 tipo_deincognito
2026-03-26 14:59http://217.69.3.51/R9Zc5gmlYM%2FhY1HWN6Obyg%3D%3D GlassWormglassworm infostealer Wave3 tipo_deincognito
2026-03-25 06:4145.150.34.158:4043 GlassWormglassworm Hvnc tipo_deincognito
2026-03-25 06:41217.69.2.135:4787 GlassWormglassworm socket-io Wave3 tipo_deincognito
2026-03-25 06:41https://calendar.app.google/2NkrcKKj4T6Dn4uK6 GlassWormcalendar-c2 glassworm Wave3 tipo_deincognito
2026-03-25 06:41217.69.2.135:80 GlassWormglassworm solana Wave3 tipo_deincognito
2026-03-25 06:41217.69.2.135:4789 GlassWormglassworm solana Wave3 tipo_deincognito
2026-03-19 06:2545.150.34.158:8080 GlassWormglassworm wave3-exfil tipo_deincognito
2026-03-16 20:32https://calendar.app.google/Jrfk5pBTNbM7bkbP8 GlassWormdead-drop glassworm Google-Calendar tipo_deincognito
2026-03-16 20:32https://go.getblock.us/86aac42ad4484f3c813079afc201451c GlassWormchrome-extension glassworm solana tipo_deincognito
2026-03-16 20:32fdba5be3da2467e642bd8710f971e6b266b30ac15f5f413982fd719d7e0bffd9 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:321ed7ca5301e96e3cef201311b76ba33f842fdb34e91041177865b6e07acb7b4d GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:32ee3e4dd5c1e073b8805f4107ccc7bc7e6e3c209fe13ea04ff3f2173c8dbe74a6 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:32415a4f39dd93c2ad5fd02023489352b974a9a917664240299ca4c35ca9a5a362 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:3243253a888417dfab034f781527e08fb58e929096cb4ef69456c3e13550cb4e9e GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:324e339dcdc3e3a8bf5271f7f76a9c4f064d3e34cbb51f8770ff4cce910fbcbce5 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:32de81eacd045a88598f16680ce01bf99837b1d8170c7fc38a18747ef10e930776 GlassWormglassworm native-addon npm-archive tipo_deincognito
2026-03-16 20:3278ecfb7753499b69fe85c348377c2e522b275c34c1edd172f9b543da18438e4e GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32bce8c1023af5d8839e4e6e164f143472ae996dacfe2c7005a9a6afef2c8b8ff3 GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:329c7f93b925c86b911f4488c10709407b2c1f0695ec120cb998a9fd34d22c503a GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32e2a8ecd85261dc9b3d2a0d435721f7b8fe3c3bcd846567afeaca77fcf9de2e9e GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32626958cf09ed98577efd462d0f1b79680bbbc32c1783c9322687369ac6392312 GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32d29feab76ea82367dcce29ba6010f5d0e5db71b298a31cd847f5ad6013728f3a GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32baa6d18542a5bbcfa6beec942660cf8e7988e14a727d775a5c90313ec7392a96 GlassWormencrypted glassworm npm-archive tipo_deincognito
2026-03-16 20:32108.61.177.82:5000 GlassWormglassworm wave3-extension tipo_deincognito
2026-03-16 20:32199.247.10.166:5000 GlassWormglassworm wave3-extension tipo_deincognito
2026-03-16 20:3245.76.45.151:5000 GlassWormglassworm wave3-extension tipo_deincognito
2026-03-16 20:3270.34.242.255:80 GlassWormglassworm wave3-payload tipo_deincognito
2026-03-16 20:32http://45.32.150.251/3e4Tg8V%2F8aCmOJKipASADg%3D%3D GlassWormglassworm wave3-payload tipo_deincognito
2026-03-16 20:32http://45.32.150.251/IZeqdX38aTS6j3EvNTaC8g%3D%3D GlassWormglassworm wave3-payload tipo_deincognito
2026-03-16 20:31http://217.69.3.51/Aq9UfpDha27tnnODBaw7OA%3D%3D GlassWormglassworm infostealer payload Wave3 tipo_deincognito
2026-03-16 20:31http://217.69.3.51/get_arhive_npm/QfSoYf%2Bg5YdyaN0mq0Od2Q%3D%3D GlassWormglassworm infostealer npm-supply-chain Wave3 tipo_deincognito
2026-03-16 20:31http://217.69.3.51/led-win32 GlassWormdotNET glassworm infostealer pe Wave3 tipo_deincognito
2026-03-16 20:31http://217.69.0.159/Aq9UfpDha27tnnODBaw7OA%3D%3D GlassWormglassworm infostealer Wave3 Windows tipo_deincognito
2026-03-16 20:31217.69.11.60:80 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:3145.32.151.157:80 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:31217.69.11.57:80 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:3145.32.150.97:80 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:3145.76.44.240:80 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:31217.69.11.60:4789 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:3145.32.151.157:4789 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:31217.69.11.57:4789 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:3145.32.150.97:4789 GlassWormglassworm historical infostealer Vultr tipo_deincognito
2026-03-16 20:31https://calendar.app.google/M2ZCvM8ULL56PD1d6 GlassWormc2 glassworm Google-Calendar tipo_deincognito
2026-03-16 20:31217.69.3.152:80 GlassWormexfil glassworm infostealer Wave3 tipo_deincognito
2026-03-16 06:26http://45.32.150.251:4789/socket.io/ GlassWormglassworm infostealer macOS RAT supply-chain Vultr tipo_deincognito
2026-03-14 15:39217.69.3.51:80 GlassWorm tipo_deincognito
2026-03-14 15:39http://217.69.3.51:4789/socket.io/ GlassWorm tipo_deincognito
2026-03-14 15:39217.69.3.51:4789 GlassWorm tipo_deincognito
2026-03-13 16:20217.69.0.159:4789 GlassWormglassworm infostealer macOS RAT supply-chain Vultr tipo_deincognito
2026-03-13 16:20217.69.0.159:5000 GlassWormglassworm infostealer macOS RAT supply-chain Vultr tipo_deincognito
2026-03-13 16:20http://217.69.0.159:4789/socket.io/ GlassWormglassworm macOS RAT socket-io tipo_deincognito
2026-03-13 16:20http://217.69.0.159/xDMjY1UOOHWPpfDdc1OY1w%3D%3D GlassWormglassworm infostealer macOS tipo_deincognito
2026-03-13 16:20http://217.69.0.159/dq1IMEteQ4AbO3daeYGXZw%3D%3D GlassWormglassworm infostealer kill-switch macOS tipo_deincognito
2026-03-13 16:20217.69.0.159:80 GlassWormglassworm infostealer kill-switch macOS tipo_deincognito
2026-03-13 06:14217.69.11.99:80 GlassWormglassworm infostealer macOS RAT supply-chain Vultr tipo_deincognito
2026-03-13 06:14217.69.11.99:4789 GlassWormglassworm infostealer macOS RAT supply-chain Vultr tipo_deincognito
2026-03-13 06:14208.85.20.124:80 GlassWormEXFILTRATION glassworm infostealer macOS Vultr tipo_deincognito
2026-03-13 06:14http://217.69.11.99/q6AUyyAAatxzpCw2im8XFg%3D%3D GlassWormglassworm infostealer kill-switch macOS tipo_deincognito
2026-03-13 06:14http://217.69.11.99/module/wrtc GlassWormglassworm macOS proxy tcp-tunnel tipo_deincognito
2026-03-13 06:14http://217.69.11.99:4789/socket.io/ GlassWormglassworm macOS RAT socket-io tipo_deincognito
2026-03-08 18:45199.247.10.14:4789 GlassWormc2 glassworm npm solana supply-chain vscode Anonymous
2026-03-08 18:45208.76.223.59:80 GlassWormc2 glassworm npm solana supply-chain vscode Anonymous
2025-11-20 17:09199.247.10.166:80 GlassWormDropper Worm Matagi
2025-11-20 17:0945.76.45.151:80 GlassWormDropper Worm Matagi
2025-11-20 17:09217.69.13.229:80 GlassWormDropper Worm Matagi
2025-11-20 17:09217.69.3.218:80 GlassWormDropper Worm Matagi