Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxp://metadata[.]google[.]internal/computeMetadata/v1/instance/?recursive=true
copy defanged
copy refanged (live)
First seen
2026-05-13
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Double Agents: Exposing Security Blind Spots in GCP Vertex AI
Palo Alto Networks
GCP metadata service endpoint queried by the malicious agent to extract service agent credentials.
2026-05-13
http://metadata.google.internal/computemetadata/v1/instance/?recursive=true · URL · cyfar.ca
