redsysgate[.]com

Posts referencing this indicator

• Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud

  C2 server disguised as a legitimate Redsys domain, used for WebSocket exfiltration and command handling.

  2026-05-13