Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
sha256
239440c830e17530dda0a8a06ed2708860998750a1e3ed2239e919465dc59420
copy defanged
copy refanged (live)
First seen
2026-05-13
Last seen
2026-05-13
Sightings
1
Posts referencing this indicator
GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government
Socket
Hash of payload.rb script used in the campaign
2026-05-13
239440c830e17530dda0a8a06ed2708860998750a1e3ed2239e919465dc59420 · SHA-256 hash · cyfar.ca
