indicatorurl
hxxps://eo8el024afgbal3[.]m[.]pipedream[.]net/exfil/SGV5LCBNeSBwYXNzd29yZCBpcyAhMjE0U0RCRyEhISB0aGFua3MgSVQ=
- First seen
- 2026-08-18
- Last seen
- 2026-08-18
- Sightings
- 1
Posts referencing this indicator
- CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
Attacker webhook endpoint receiving base64-encoded exfiltrated email data via Copilot's URL fetch capability.
