register.mediumser[.]comDomain
Reported by 1 independent source · first reported by Seqrite Labs · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor“During dynamic analysis, we observed the malware first contacted the Cloudflare Workers endpoint, which returned the hostname register.mediumser[.]com.”
Indicators reported together
named in the same reports- hxxps://appupdate.0cmds20cj2cdf8.workers[.]dev/A3cmf0q9ASCionin 1 report
- appupdate.0cmds20cj2cdf8.workers[.]devin 1 report
- hxxps://regupdate.eamakfu49dc28wa.workers[.]dev/vere0zme82cadrein 1 report
- regupdate.eamakfu49dc28wa.workers[.]devin 1 report
- 104.64.211[.]22in 1 report
- mediumser[.]comin 1 report
- 38.60.244[.]141in 1 report
- 26f735cbbb1257be…5cb588f9f916in 1 report
- daeac66441b88ba2…ea853ac6f9d3in 1 report
- 4a1a1b1455c3ea91…303655e2c9f2in 1 report
- aeff39943e254c34…984310d8ba5cin 1 report
- cd147efe37003399…4a64cc62b059in 1 report
- 575305cdaeb1d218…7f71d84e6f35in 1 report
- c4b4647795567ab1…061973e87c02in 1 report
- 0803521a7e9081f4…33f581d8bb39in 1 report
- maui-cocktailbar[.]comin 1 report
Copy these 16 indicators · defanged
Thanks — we review every report.