Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxp://metakit[.]fireant[.]vn/Software/setup[.]exe
copy defanged
copy refanged (live)
First seen
2026-06-12
Last seen
2026-06-12
Sightings
1
Posts referencing this indicator
OceanLotus: From external espionage to domestic targeting
ESET
Compromised legitimate FireAnt MetaKit update URL used to deliver the malicious downloader.
2026-06-12
http://metakit.fireant.vn/software/setup.exe · URL · cyfar.ca