ctrlINT What the industry said about every indicator, with the quote

wellnesscaremed[.]comDomain

Reported by 2 independent sources · first reported by Zscaler ThreatLabz · last reported

Last reported 6 months ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “This sample communicates with the same C&C domain (wellnesscaremed[.]com) used in the campaign exploiting CVE-2026-21509, suggesting a potential connection between the two exploits.”

    Trend Micro ResearchVendorC2
    Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

  2. “wellnesscaremed[.]com”

    Zscaler ThreatLabzVendor
    APT28 Leverages CVE-2026-21509 in Operation Neusploit

Indicators reported together

named in the same reports
Copy these 18 indicators · defanged

Also named with it: CVE-2026-21509, CVE-2026-21513

Thanks — we review every report.

Report a wrong value
What is wrong with wellnesscaremed[.]com here?
No account needed. We do not store your IP address.