45.61.157[.]22IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing“The harvested data is exfiltrated via port 5863 to "dns.educationportals.biz," which resolves to the IP address "45.61.157[.]22."”
Indicators reported together
named in the same reports- docsportal[.]inin 1 report
- dns.educationportals[.]bizin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.