ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://zenmetrics-software.com/api/devices/register.

Database Entry


IOC ID:1799774
IOC: https://zenmetrics-software.com/api/devices/register
IOC Type :url
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is elevated (70%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-04-25 14:40:36 UTC
Last seen:never
UUID:58555361-402d-11f1-8759-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:ClickFix FastAPI Python-embed RAT rmm zm_agent
Reference: https://github.com/Lenny-3BO/threat-intel/tree/main/clickfix/zenmetrics-luxespa-clickfix

Avatar
Lenny_3BO
zenmetrics ClickFix commercial-RMM agent (zm_agent). FastAPI+React C2 panel, tenant model --org/--key/--group, PS/JScript exec, SOCKS5 proxy, 30fps WS screen stream, Telegram exfil.