netvigil[.]orgDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Operation Olalampo: Inside MuddyWater’s Latest Campaign“Analysis revealed a direct link to previously observed MuddyWater infrastructure, specifically the domain (netvigil[.]org), which hosted identical HTML content as shown below and was used in earlier campaigns alongside the GhostFetch and GhostBackDoor malware back in October 2025.”
Indicators reported together
named in the same reports- 162.0.230[.]185in 1 report
- promoverse[.]orgin 1 report
- 209.74.87[.]67in 1 report
- miniquest[.]orgin 1 report
- 159.198.43[.]141in 1 report
- 209.74.87[.]100in 1 report
- hxxp://127.0.0[.]1:8080in 1 report
- hxxp://127.0.0[.]1:8080/testin 1 report
- hxxp://127.0.0[.]1:8080/in 1 report
- hxxps://codefusiontech[.]orgin 1 report
- codefusiontech[.]orgin 1 report
- hxxp://143.198.5[.]41:443/successin 1 report
- 143.198.5[.]41in 1 report
- 62ed16701a14ce26…2fe606c15407in 1 report
- 02ccc4271362b92a…e2867cc662a5in 1 report
- 326b808f4f933f20…93454c8ed334in 1 report
- jerusalemsolutions[.]comin 1 report
- f4e0f4449dc50e33…93dd8e4bc55din 1 report
- 3441306816018d08…fac0200e9152in 1 report
- 9ca11fcbd75420bd…855e7bd0fb8ein 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.