swapzone[.]ioDomain
Reported by 1 independent source · first reported by Cisco Talos · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2“The initial version we observed targeted the cryptocurrency trading site “SwapZone[.]io”.”
Indicators reported together
named in the same reports- hxxps://docs.google[.]com/spreadsheets/d/in 1 report
- simpleswap[.]ioin 1 report
- hxxps://paste[.]sh/dQfdExjo#AqjB4BBtin 1 report
- obfuscator[.]ioin 1 report
Copy these 4 indicators · defanged
Thanks — we review every report.