wss://sad4w7h913-b4a57f9c36eb[.]herokuapp[.]com/ws

Posts referencing this indicator

• Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

  Hard-coded WebSocket Secure URL used by the SNOWGLAZE Python tunneler for C2.

  2026-05-13