api.mainnet.solana[.]comDomain
Reported by 1 independent source · first reported by Kaspersky Securelist · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents“Furthermore, as noted above, the campaign leverages the legitimate Solana blockchain via the RPC endpoint api.mainnet.solana[.]com to deliver the address of the second‑stage C2 server to the malware.”
Indicators reported together
named in the same reports- itorrents[.]orgin 1 report
- a0b13781edd7cfdab13d79afff3c83c1in 1 report
- hxxps://deadhub[.]orgin 1 report
- deadhub[.]orgin 1 report
- hxxp://193.23.118[.]155in 1 report
- 193.23.118[.]155in 1 report
- 4843f9fafcae492f11e2d4d33dbb4cddin 1 report
- 5310cabae3fbe6db8742849b588093f9in 1 report
- 70060341caf3338697a7ddfe0fb62875in 1 report
- ad4643eea15ac286fa47d1131f9ef756in 1 report
- d0b967571ac8a3863c7f324bf5bde99cin 1 report
- d88d550d0fb8e60cffff3ea61ff7a067in 1 report
- 208.64.33[.]90in 1 report
- 208.94.246[.]53in 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.