Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
https://api[.]telegram[.]org/bot7231970337:aaexyv3dvbns6xkmjb7s2haruash9owd-bw/sendmessage · URL · cyfar.ca
indicator
url
hxxps://api[[.]]telegram[[.]]org/bot7231970337:AAExyV3dvbNs6xkMJB7S2hArUash9owd-bw/sendMessage
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
5 Malicious npm Packages Typosquat Solana and Ethereum Libraries to Steal Private Keys
Socket
Hardcoded Telegram Bot API endpoint used for private key exfiltration.
2026-05-13
