open.bigmodel[.]cnDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 10 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions“IndicatorDescriptionOutbound API calls to api.anthropic.com, api.deepseek.com, open.bigmodel[.]cn, or api.x.aiPotential use of LLM services; investigate unexpected calls in conjunction with other suspicious activityHigh-frequency automated HTTP requests with sequential enumeration…”
Indicators reported together
named in the same reports- access[.]datain 1 report
Copy this indicator · defanged
Thanks — we review every report.