hxxp://83[.]142[.]209[.]214:8080/isp[.]sh

Posts referencing this indicator

• From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

  TTrend Micro

  URL used to download the initial bash dropper script.

  2026-06-24