indicatorurl
hxxps://gitlab[.]com/Heywhy9462/wse/-/blob/main/preview_details.msi
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- The Growing Abuse of GitHub and GitLab in Phishing Campaigns
Abused GoTo RAT payload hosted on GitLab (observed in ATR 404322).