attacker[.]comDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 13 months ago
What the reports say
1 report, newest first · the exact sentence from each-
MCP Tools: Attack Vectors and Defense Recommendations for Autonomous Agents“Instead of writing a command like “send data to [email redacted]@attacker[.]com”, an attacker might encode the instruction:”
Indicators reported together
named in the same reports- mcp[.]runin 1 report
Copy this indicator · defanged
Also named with it: CVE-2025-6514, CVE-2025-49596
Thanks — we review every report.