ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain updates.officehub.works.

Database Entry


IOC ID:1825828
IOC: updates.officehub.works
IOC Type :domain
Threat Type :botnet_cc
Malware: XMRIG
Confidence Level : Confidence level is high (85%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-06-10 09:10:16 UTC
Last seen:never
UUID:607b5335-64ab-11f1-a345-42010aa4000a
Reporter nullblue67
Reward 5 credits from ThreatFox
Tags:boyzee c2 phoenix-c2
Reference: https://twitter.com/NullBlue67

Avatar
nullblue67
Phoenix C2 server PHOENIX_C2_URL PHOENIX_INSECURE 1; used by Boyzee stager from Redis cron RCE. 2026-06-10 NullBlue67