ctrlINT What the industry said about every indicator, with the quote

loca[.]ltDomain

Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported

Last reported 3 months ago

What the reports say

2 reports, newest first · the exact sentence from each
  1. “En algunos casos aislados, también observamos experimentos con otros servicios de túneles, como loca[.]lt y bore.pub, pero estos no parecieron incorporarse de manera permanente al conjunto de herramientas del grupo.”

    ESET WeLiveSecurity (ES)Vendor
    Gamaredon en 2025: uso de túneles, workers, dead drops y nuevas alianzas
  2. “In a few isolated cases, we also saw experiments with other tunnel services, such as loca[.]lt and bore.pub, but these did not appear to become part of the group’s regular toolkit.”

    ESET WeLiveSecurityVendor
    Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances

Indicators reported together

named in the same reports
Copy these 11 indicators · defanged

Also named with it: CVE-2025-8088

Thanks — we review every report.

Report a wrong value
What is wrong with loca[.]lt here?
No account needed. We do not store your IP address.