bnbnhura[.]topDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
RemControl: AI Built the Overlays. Victims Lose their PINs“The decoding result of the Telegram dead-drop discussed above is the C2 domain used in the first observed RemControl campaigns – bnbnhura[.]top.”
Indicators reported together
named in the same reports- hxxps://tvtap-liveapp[.]com/dl.phpin 1 report
- tvtap-liveapp[.]comin 1 report
- hxxps://telegram[.]me/ftesterain 1 report
- hxxps://telegram[.]me/+Psyt04xu-cRjMTg0in 1 report
- hxxps://tvtap-hd[.]app/in 1 report
- tvtap-hd[.]appin 1 report
- hxxp://vpn.doneplay[.]site/in 1 report
- vpn.doneplay[.]sitein 1 report
- hxxp://ff-de.shutgpt[.]ir/in 1 report
- ff-de.shutgpt[.]irin 1 report
- hxxp://vpn.askarzadeh[.]com/in 1 report
- vpn.askarzadeh[.]comin 1 report
- hxxp://cdn.dlmafi[.]top/in 1 report
- cdn.dlmafi[.]topin 1 report
- hxxp://216.126.229[.]216/in 1 report
- 216.126.229[.]216in 1 report
- hxxps://definatelynoone[.]comin 1 report
- definatelynoone[.]comin 1 report
- hxxps://157.90.179[.]116in 1 report
- 157.90.179[.]116in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.