🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain githooks.xyz.

Database Entry


IOC ID:1999969
IOC: githooks.xyz
IOC Type :domain
Threat Type :payload_delivery
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS16509 AMAZON-02
Country:- US
First seen:2026-10-29 06:12:10 UTC
Last seen:never
UUID:e55d35a1-d30e-11f1-a74e-42010aa4000a
Reporter shmulc
Reward 5 credits from ThreatFox
Tags:ContagiousInterview DPRK fake-interview

Avatar
shmulc
Stage and payload hosts referenced by fake interview / take-home repos on GitHub (Contagious Interview toolkit: settings/{linux,mac}?flag=N stage scripts, /api/ipcheck payload endpoints with x-secret-header). Triggers: npm start loader in app code, git hook, and a fake camera-fix page running curl ... | sh. Found by GitHub code search 2026-10-28; not fetched.