meet.element[.]twDomain
Reported by 1 independent source · first reported by Kaspersky Securelist · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Angry Birds: Toy Ghouls’ new toys“For the second backdoor version, the attackers set up their own Element server running on the Matrix protocol, meet.element[.]tw, as the C2 server.”
Indicators reported together
named in the same reports- laboo[.]booin 1 report
- hxxp://ip-api[.]com/jsonin 1 report
- broker.hivemq[.]comin 1 report
- bfadbeee63a4f0bf19ec9deb8fa58f58in 1 report
- 7916c33688385525078bee504c90f359in 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.