financemachinelearning[.]comDomain
Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported
Last reported 4 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
OceanLotus: del espionaje exterior al foco en objetivos en Vietnam“A continuación, el backdoor envía una solicitud de beacon la URL hardcodeada hxxps://financemachinelearning[.]com/apparatus/wind/twig/statement.html, incrustando información del host cifrada en el encabezado HTTP cookie.”
-
OceanLotus: From external espionage to domestic targeting“The backdoor then issues a beacon request to the hardcoded URL hxxps://financemachinelearning[.]com/apparatus/wind/twig/statement.html, embedding encrypted host information within the HTTP Cookie header.”
Indicators reported together
named in the same reports- metakit.fireant[.]vnin 2 reports
- hxxp://metakit.fireant[.]vn/Software/version.xmlin 2 reports
- 139.162.11[.]152in 2 reports
- 142.91.98[.]77in 2 reports
- hxxps://financemachinelearning[.]com/apparatus/wind/twig/statement.htmlin 2 reports
- gatewayrvcenter[.]comin 2 reports
- 139.180.128[.]42in 2 reports
- coachcybersecurity[.]comin 2 reports
- 139.99.33[.]239in 2 reports
- mxprodesign[.]comin 2 reports
- 166.88.77[.]186in 2 reports
- power-sync-services[.]comin 2 reports
- 103.119.47[.]104in 2 reports
- 511b77459673ec42…1d233b6c39fbin 2 reports
- 59a8553a4f8130f5…0be4d4da0e98in 2 reports
- 9ca1a5c7f79882db…26bcdcb9f6ddin 2 reports
- a8e2bbbfcb865003…12755ab0c165in 2 reports
- f74f1feb62b662cd…27824e55acb9in 2 reports
- f8f8209987ca7f13…e21bd2ae93a9in 2 reports
- 19a69f856efa811c…997b4724f8bdin 2 reports
Copy these 20 indicators · defanged
Thanks — we review every report.