107.175.82[.]242IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 30 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer“The MSI installer, for its part, is responsible for retrieving the next-stage payload ("psychedeliclove.exe") from the URL "107.175.82[.]242:9000." The 64-bit Windows executable is Psychedelic Stealer, which performs the following functions -”
Indicators reported together
named in the same reports- uasputnik[.]comin 1 report
- 193.178.159[.]128in 1 report
- fsputnik[.]comin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.