ctrlINT What the industry said about every indicator, with the quote

rsproxy[.]cnDomain

Reported by 2 independent sources · first reported by Cisco Talos · last reported

Last reported 22 days ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “Nearly a dozen distinct Antino build outputs feature Cargo registry paths referencing rsproxy[.]cn, a high-speed domestic mirror and proxy service for crates.io catering to mainland China”

    The Hacker NewsNews
    Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

  2. “Ten distinct Antino build outputs contain Cargo registry paths referencing rsproxy[.]cn, a Rust package mirror intended to improve dependency downloads within mainland China.”

    Cisco TalosVendor
    China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Indicators reported together

named in the same reports
Copy these 20 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with rsproxy[.]cn here?
No account needed. We do not store your IP address.