indicatorurl
hxxp://metadata[.]google[.]internal/computeMetadata/v1/instance/?recursive=true
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Double Agents: Exposing Security Blind Spots in GCP Vertex AI
GCP metadata service endpoint queried by the malicious agent to extract service agent credentials.