koi[.]aiDomain
Reported by 2 independent sources · first reported by Trend Micro Research · last reported
Last reported 5 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
¿Tu agente de IA podría atacarte?“Fuente: Koi[.]ai”
-
From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers“On December 8, 2025, Koi[.]ai published their findings about a campaign specifically targeting software developers through weaponized Visual Studio Code extensions.”
Indicators reported together
named in the same reports- 369479bd9a248c94…00f54fcc1598in 1 report
- 92af258d13494f20…75b85da00430in 1 report
- 2e649f6145f55988…b3fff4b1f6f4in 1 report
- 5c507b22e9814428c5f2b1ef213c5c4ain 1 report
- aba7133f975a0788…2691e98600c5in 1 report
- server09.mentality[.]cloudin 1 report
- 74e43a0175179a0a…2c0a5d1923d5in 1 report
- syn1112223334445556667778889990[.]orgin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.