loophole[.]siteDomain
Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported
Last reported 3 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Gamaredon en 2025: uso de túneles, workers, dead drops y nuevas alianzas“… de C&C detrás de workers de Cloudflare (workers.dev), y en junio añadió devtunnels.ms de Microsoft y Loophole (loophole[.]site).”
-
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances“…ing the group hide C&C servers behind Cloudflare workers (workers.dev), and in June it added Microsoft’s devtunnels.ms and Loophole (loophole[.]site).”
Indicators reported together
named in the same reports- devtunnels[.]msin 2 reports
- loca[.]ltin 2 reports
- bore[.]pubin 2 reports
- cleverapps[.]ioin 2 reports
- teletype[.]inin 2 reports
- write[.]asin 2 reports
- lesma[.]euin 2 reports
- nopaste[.]netin 2 reports
- pastee[.]devin 2 reports
- tebi[.]ioin 2 reports
- de-fra.i3storage[.]comin 2 reports
Copy these 11 indicators · defanged
Also named with it: CVE-2025-8088
Thanks — we review every report.