Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://campanha1-api[.]ef971a42[.]workers[.]dev/api/campaign
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook
Elastic Security Labs
Active campaign configuration endpoint for worm modules
2026-05-13
https://campanha1-api.ef971a42.workers.dev/api/campaign · URL · cyfar.ca
