zu7kt[.]ccDomain

Reported by 1 independent source · first reported 5 Oct 2023 by Group-IB · last reported 15 Feb 2024

Last reported 2 years ago

What the reports say

2 reports, newest first · the exact sentence from each

“zu7kt[.]cc”

Group-IBVendor15 Feb 2024
Face Off: Group-IB identifies first iOS trojan stealing facial recognition data
“zu7kt[.]cc”

Group-IBVendor5 Oct 2023
Let’s dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix

Indicators reported together

named in the same reports

ks8cb[.]ccin 2 reports
ms2ve[.]ccin 2 reports
d8834a21bc70fbe2…e35be1b7276bin 2 reports
hds6y[.]ccin 2 reports
smgeo[.]ccin 2 reports
www.dg1e[.]comin 2 reports
wbke[.]ccin 2 reports
gname[.]comin 1 report
hxxps://testflight.apple[.]com/join/in 1 report
18.143.229[.]200in 1 report
bweri6[.]ccin 1 report
blsdk5[.]ccin 1 report
nnzf1[.]ccin 1 report
t8bc[.]xyzin 1 report
app.js6kk[.]xyzin 1 report
bv8k[.]xyzin 1 report
app.re6s[.]xyzin 1 report
hzc5[.]xyzin 1 report
app.bc2k[.]xyzin 1 report
4571f8c8560a8a66…a07d7a93a3dfin 1 report

Copy these 20 indicators · defanged

20 indicators, defanged, one per line

ks8cb[.]cc
ms2ve[.]cc
d8834a21bc70fbe202cb7c865d97301540d4c27741380e877551e35be1b7276b
hds6y[.]cc
smgeo[.]cc
www.dg1e[.]com
wbke[.]cc
gname[.]com
hxxps://testflight.apple[.]com/join/
18.143.229[.]200
bweri6[.]cc
blsdk5[.]cc
nnzf1[.]cc
t8bc[.]xyz
app.js6kk[.]xyz
bv8k[.]xyz
app.re6s[.]xyz
hzc5[.]xyz
app.bc2k[.]xyz
4571f8c8560a8a66a90763d7236f55273750cf8dd8f4fdf443b5a07d7a93a3df

Thanks — we review every report.

Report a wrong value