98aicai[.]comDomain
Reported by 4 independent sources · first reported by The Register (security) · last reported
Last reported 15 days ago
What the reports say
4 reports, newest first · the exact sentence from each-
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks“Five of the seized domains were used to deliver the malware: 98aicai[.]com, 98aicode.com, outlook3650.com, youtubecard.com and linkedinns.net.”
-
US Disrupts Chinese State-Sponsored Hacking Tools“The US seized the domains the threat actors were using to access MicroScan and FishHub, including c0cc.cc, 98aicai[.]com, 98aicode.com, outlook3650.com, youtubecard.com, and linkedinns.net.”
-
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions“98aicai[.]com”
-
US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide“Meanwhile, five of the seized domains, 98aicai[.]com, 98aicode.com, outlook3650.com, youtubecard.com, and linkedinns.net, delivered the FishHub malware as recently as March, and infected about 20 Taiwanese universities.”
Indicators reported together
named in the same reports- c0cc[.]ccin 4 reports
- 98aicode[.]comin 4 reports
- outlook3650[.]comin 4 reports
- youtubecard[.]comin 4 reports
- linkedinns[.]netin 4 reports
- 98aiblog[.]comin 2 reports
- 202.182.109[.]151in 1 report
- w8510[.]comin 1 report
- 198.13.53[.]226in 1 report
Copy these 9 indicators · defanged
Also named with it: CVE-2015-3306, CVE-2015-5477, CVE-2016-3081, CVE-2021-3199, CVE-2023-22894
Thanks — we review every report.