supportaru.serveftp[.]comDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 16 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware“…nose.hashicorp-terraform.io/plugins/grpc/v6/schema/metrics/333afe63-c5a2-43f0-b046-7cbaa7797e8a Bash script download URLhxxps://supportaru.serveftp[.]com/statics/cache/v11/FLATROOF download URLhxxps://raw.githubusercontent.com/bluearuhost/hospitalrun-frontend/refs/heads/main/public…”
Indicators reported together
named in the same reports- hashicorp-terraform[.]ioin 1 report
- control[.]inin 1 report
- hxxps://arusupport-region1-webhook[.]online/statics/cache/v11/abicfjejin 1 report
- arusupport-region1-webhook[.]onlinein 1 report
- campaign[.]inin 1 report
- 9d88b4494c7bc27b10358b68a899ad54in 1 report
- diagnose.hashicorp-terraform[.]ioin 1 report
- stage-fashion365.vercel[.]appin 1 report
Copy these 8 indicators · defanged
Thanks — we review every report.