ctrlINT What the industry said about every indicator, with the quote

capsysnet[.]vgDomain

Reported by 1 independent source · first reported by The Hacker News · last reported

Last reported 18 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “What's more, the injected process launches PowerShell to obtain a secondary in-memory stage from "capsysnet[.]vg" and initiate outbound connections to "ciliabula.cc."”

    The Hacker NewsNews
    ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-6854

Thanks — we review every report.

Report a wrong value
What is wrong with capsysnet[.]vg here?
No account needed. We do not store your IP address.