indicatorurl
hxxps://cdn[.]cloudfront-js[.]com:8443/u
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale
Typosquatted CloudFront domain used for exfiltration by the Sliver C2 toolset.