cleverapps[.]ioDomain
Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported
Last reported 3 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Gamaredon en 2025: uso de túneles, workers, dead drops y nuevas alianzas“En paralelo, observamos que Gamaredon abusó de ofertas de plataforma como servicio (PaaS) de Clever Cloud (cleverapps[.]io) y Supabase (supabase.co) en varias campañas, lo que sugiere que el grupo sigue buscando activamente infraestructura barata, descartable y que se…”
-
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances“In parallel, we observed Gamaredon abuse platform-as-a-service offerings from Clever Cloud (cleverapps[.]io) and Supabase (supabase.co) in several campaigns, suggesting that the group is still actively looking for cheap, disposable infrastructure that blends in with legitimate traf…”
Indicators reported together
named in the same reports- devtunnels[.]msin 2 reports
- loophole[.]sitein 2 reports
- loca[.]ltin 2 reports
- bore[.]pubin 2 reports
- teletype[.]inin 2 reports
- write[.]asin 2 reports
- lesma[.]euin 2 reports
- nopaste[.]netin 2 reports
- pastee[.]devin 2 reports
- tebi[.]ioin 2 reports
- de-fra.i3storage[.]comin 2 reports
Copy these 11 indicators · defanged
Also named with it: CVE-2025-8088
Thanks — we review every report.