indicatorurl
hxxps://events[.]msft23[.]com/process
- First seen
- 2026-05-21
- Last seen
- 2026-05-21
- Sightings
- 1
Posts referencing this indicator
- SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer
Main C2 beacon endpoint for uploading exfiltrated data and receiving tasks.