indicatorurl
hxxps://pastebin[[.]]com/raw/mcwWi1Ue
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
Primary driver list URL used by the dropper for C2 communication