Joined September 2024
104.164.55.12[:8080 92fba744e3be5c3e6e4824dce11a883de602df7ad654c3152c77aa6c09abed56 #Nexus #C2 @500mk500 @skocherhan @JAMESWT_WT @ViriBack @malwrhunterteam #Panel #CTI
1
2
151
2.27.160.149 176.65.144.78 91.92.34.93 45.63.5.163 helvetitech.site 45.86.61.186 96.62.224.138 👉pastebin.com/T2YLeQGC #Shadow #HVNC #C2 #CTI @500mk500 @smica83 @skocherhan @ViriBack @malwrhunterteam
2
1
7
460
107.172.79.182[:5000 fastpath[.cyou 2.27.61.138[:8888 mivaworker[.pro 185.239.48.112[:8888 16.16.63.239[:8080 - 5874e779a7718f416185c920a19be41d569ddd43d01b405fc7ffde2db955ad6c @500mk500 @skocherhan @ViriBack @malwrhunterteam #C2 #Panel #CTI
1
1
9
530
paybtmob[.store 45.158.8.87 #LAFS #RAT #C2 #Panel #CTI @500mk500 @skocherhan @smica83 @ViriBack @malwrhunterteam b4ee9ccd3db4836ccce2bfd5822d65c541a488ddf84fa9569070fa724c172296 dad182e472136e1ce4e4ad4aa92f84d23b85bf289f5f9d6d3a96146c25c219ab
1
1
4
231
85.215.175.202 denexia-node.duckdns.]org denexia-license.duckdns.]org denexia-panel.duckdns.]org @500mk500 @skocherhan @smica83 @ViriBack @malwrhunterteam #RAT #C2 #Panel #CTI
1
1
4
243
167.86.126.192:]3000 #Ranger is advertising malware-as-a-service with credential theft, remote access, stealth payloads, and ransomware. #MaaS #CyberSecurity #CTI #InfoSec #Panel @500mk500 @smica83 @skocherhan @ViriBack @malwrhunterteam
1
7
508