indicatorurl
hxxps://loserrq0j1sha8[.]com/debug/payload[.]applescript?build=a39427f9d5bfda11277f1a58c89b7c2d
- First seen
- 2026-06-18
- Last seen
- 2026-06-18
- Sightings
- 1
Posts referencing this indicator
- Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
URL hosting the MacSync infostealer AppleScript payload.
