ctrlINT What the industry said about every indicator, with the quote

kiriosyka[.]comDomain

Reported by 1 independent source · first reported by Huntress · last reported

Last reported 3 days ago

What the reports say

1 report, newest first · the exact sentence from each
  1. “…chef server from which it originated, sending a series of HTTPS POST communications, then retrieving a ZIP file from the URL hxxps://kiriosyka[.]com/KsxmmKiN5N0j/sqr-viewertr6: a 52MB compressed file that contains a full, portable instance of the Node.js code interpreter, and a mal…”

    HuntressVendor
    Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware

Indicators reported together

named in the same reports
Copy these 20 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with kiriosyka[.]com here?
No account needed. We do not store your IP address.