79.137.205[.]212IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Ajina attacks Central Asia: Story of an Uzbek Android Pandemic“Once the trojan is launched it connects to the gate server 79.137.205[.]212:8080, generates AES encryption key, and sends it to the gate server along with a hard-coded worker’s name and userId that is also stored into SharedPreferences.”
Thanks — we review every report.