Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://1a820b09-95ba-44eb-b350-417e8241b725-00-1lgwuuen9b77p[.]worf[.]replit[.]dev/download
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities
Cisco Talos
Download URL for the Nim-based backdoor
2026-05-14
https://1a820b09-95ba-44eb-b350-417e8241b725-00-1lgwuuen9b77p.worf.replit.dev/download · URL · cyfar.ca
