mac-clean-storage.gitlab[.]ioDomain
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign“Simultaneously, Mac utility-themed lures (mac-clean-storage.gitlab[.]io, mac-guide-tool.gitlab.io) were also found to have been deployed, suggesting the same actor operated parallel campaigns.”
Indicators reported together
named in the same reports- perplexity-platform.gitlab[.]ioin 1 report
- claude-code-app.gitlab[.]ioin 1 report
- claudeapp.gitlab[.]ioin 1 report
- mac-guide-tool.gitlab[.]ioin 1 report
- chatgpt-codex.gitlab[.]ioin 1 report
- claude-desktop-lm.gitlab[.]ioin 1 report
- cladesktop.gitlab[.]ioin 1 report
- codexgpt.gitlab[.]ioin 1 report
- chatgpt-codex-app.gitlab[.]ioin 1 report
- chatgpt-codex-lm.gitlab[.]ioin 1 report
- claudecode-desktop.gitlab[.]ioin 1 report
- claudecode-download.gitlab[.]ioin 1 report
- hxxps://loserrq0j1sha8[.]com/debug/loader.sh?build=a39427f9d5bfda11277f1a58c89b7c2din 1 report
- loserrq0j1sha8[.]comin 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.