indicatorurl
hxxp[:]//localhost:3002/crypto-data
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Analyzing the Current State of AI Use in Malware
Default C2 URL used by the .NET infostealer to exfiltrate stolen data in JSON format.