indicatorurl
hxxps://1a820b09-95ba-44eb-b350-417e8241b725-00-1lgwuuen9b77p[.]worf[.]replit[.]dev/download
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities
Download URL for the Nim-based backdoor