Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
domain
defs[.]updater-worelos[.]com
copy defanged
copy refanged (live)
First seen
2026-07-06
Last seen
2026-07-06
Sightings
1
Posts referencing this indicator
Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker
S
Symantec
Subdomain C2 associated with updater-worelos.com infrastructure
2026-07-06
defs.updater-worelos.com · domain · cyfar.ca
