scan.aquasecurtiy[.]orgDomain
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise“…the filesystem, encrypted the bundle using AES-256-CBC with an RSA-4096 public key, and exfiltrated it to a typosquatted domain (scan.aquasecurtiy[.]org, resolving to 45.148.10.212).”
Indicators reported together
named in the same reports- models.litellm[.]cloudin 1 report
- checkmarx[.]zonein 1 report
- 45.148.10[.]212in 1 report
- 83.142.209[.]11in 1 report
- mirror.gcr[.]ioin 1 report
- 46.151.182[.]203in 1 report
- litellm[.]cloudin 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2024-3400
Thanks — we review every report.