oakenfjrod[.]ru

Posts referencing this indicator

• InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise

  Attacker-controlled base domain used for Stage 4 command-and-control and fileless payload delivery.

  2026-05-13