handala-redwanted[.]toDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack“…land.org, Karmabelow80.org, and two domains which up till recently have been used as data leak and doxxing sites by Handala Hack; Handala-Redwanted[.]to and Handala-Hack.to.”
Indicators reported together
named in the same reports- justicehomeland[.]orgin 1 report
- karmabelow80[.]orgin 1 report
- handala-hack[.]toin 1 report
- hxxps://sgp1.vultrobjects[.]com/jttrepijgdb/in 1 report
- sgp1.vultrobjects[.]comin 1 report
- hxxps://sgp1.vultrobjects[.]com/jttrepijgdb/efg_d4.zipin 1 report
- hxxps://api.telegram[.]org/bot783XXXX576in 1 report
- hxxps://api.telegram[.]org/bot772XXXX818in 1 report
- hxxps://api.telegram[.]org/file/in 1 report
- 8219453084f370ce…d82d617f26ddin 1 report
- 0190940243f6535f…43d493159e14in 1 report
- b3c1a3eebefafe1346c6a864b5423182in 1 report
- 47fa634b13b8ba35…68f848825de4in 1 report
- 88a8d118ee190ac3…6ddd2dda517bin 1 report
- b2f6f40570ac9085b5463fdb623560dein 1 report
- d2d19c7f2e4a5fdc…df32307c377ein 1 report
- 9108466c98df0103…0c23372c52f2in 1 report
- 16602375fc2dae1eb54580ab7eda6567in 1 report
- 3befcca381deb6b4…4754a4b74e81in 1 report
- 53d41445e176bf53…eda612b05855in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.