ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://hooks.slack.com/services/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.

Database Entry


IOC ID:1781007
IOC: https://hooks.slack.com/services/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
IOC Type :url
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS16509 AMAZON-02
Country:- US
First seen:2026-04-04 11:52:10 UTC
Last seen:never
UUID:b21a8b8f-300d-11f1-9af6-42010aa4000a
Reporter tipo_deincognito
Reward 5 credits from ThreatFox
Tags:CI-credential-harvester Slack-C2 supply-chain

Avatar
tipo_deincognito
npm @sbxapps/sbx-operations-administration-fieldservicetools-ui 45.0.2: Slack webhook exfiltrating AWS/GitHub/GitLab/NPM/Azure/Vault tokens + IMDS credentials from CI environments.