indicatordomain
sh[.]azurestaticprovider[.]net
- First seen
- 2026-05-19
- Last seen
- 2026-05-19
- Sightings
- 1
Posts referencing this indicator
- Popular node-ipc npm Package Infected with Credential Stealer
Bootstrap DNS resolver used by the malware for exfiltration, designed to look like legitimate Azure traffic.