ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://freefoodaid.com/ankara/Favorites/document.doc.LnK.

Database Entry


IOC ID:1766623
IOC: https://freefoodaid.com/ankara/Favorites/document.doc.LnK
IOC Type :url
Threat Type :payload_delivery
Malware: BEARDSHELL
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS200019 AlexHost
Country:- MD
First seen:2026-03-15 06:48:58 UTC
Last seen:never
UUID:745bd0c8-1ffa-11f1-9af6-42010aa4000a
Reporter Lenard
Reward 5 credits from ThreatFox
Tags:APT28 CVE-2026-21509 Operation_Neusploit WebDav
Reference: https://www.zscaler.com/blogs/security-research/operation-neusploit

Avatar
Lenard
APT28 WebDAV payload delivery URLs from CVE-2026-21509 RTF exploit documents. City-code paths (venezia, buch, ankara) used for per-target routing.