2f04ba77bb841111036b979fc0dab7fcbae99749718ae1dd6fd348d4495b5f74SHA-256 hash
Reported by 2 independent sources · first reported by Trend Micro Research · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation“2f04ba77bb841111036b979fc0dab7fcbae99749718ae1dd6fd348d4495b5f74 Oakenfjrod cloude stage”
-
InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise“SHA256: 2f04ba77bb841111036b979fc0dab7fcbae99749718ae1dd6fd348d4495b5f74”
Indicators reported together
named in the same reports- download-version.1-5-8[.]comin 1 report
- hxxps://$nipple.oakenfjrod[.]ru/cloude-91267b64-989f-49b4-89b4-984e0154d4d1in 1 report
- $nipple.oakenfjrod[.]ruin 1 report
- oakenfjrod[.]ruin 1 report
- 811fbf0ff6b6acab…0dd0178a0302in 1 report
- 104.21.0[.]95in 1 report
- 185.177.239[.]255in 1 report
- 77.91.97[.]244in 1 report
- hosted-by.yeezyhost[.]netin 1 report
- 1-5-8[.]comin 1 report
- get-version[.]comin 1 report
Copy these 11 indicators · defanged
Thanks — we review every report.