Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
https://teams.onweblive.org/api/update/8555575039/4 · URL · cyfar.ca
indicator
url
hxxps://teams[.]onweblive[.]org/api/update/8555575039/4
copy defanged
copy refanged (live)
First seen
2026-06-20
Last seen
2026-06-20
Sightings
1
Posts referencing this indicator
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
Microsoft
Post-compromise PowerShell backdoor download endpoint
2026-06-20
