ctrlINT What the industry said about every indicator, with the quote

ciliabula[.]ccDomain

Reported by 1 independent source · first reported by The Hacker News · last reported

Last reported 18 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “… injected process launches PowerShell to obtain a secondary in-memory stage from "capsysnet.vg" and initiate outbound connections to "ciliabula[.]cc."”

    The Hacker NewsNews
    ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-6854

Thanks — we review every report.

Report a wrong value
What is wrong with ciliabula[.]cc here?
No account needed. We do not store your IP address.