96.62.224[.]81IP address
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 4 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware“96.62.224[.]81”
-
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix“MSI download URL (decimal IP for 96.62.224[.]81)”
Indicators reported together
named in the same reports- sites.google[.]comin 1 report
- 45.140.205[.]28in 1 report
- hxxps://chatgpt[.]com/g/g-6ab595ad6554819181b686d4876efb80-plus-5-6?gad_source=1&gad_campaignid=in 1 report
- hxxps://chatgpt[.]com/g/g-6ab6ba039440819185ed491740b11cf8-plus-5-6in 1 report
- hxxps://chatgpt[.]com/g/g-6ab595ad6554819181b686d4876efb80-plus-5-6in 1 report
- hxxps://sites.google[.]com/view/antibot172881in 1 report
- hxxp://96.62.224[.]81/app/afafa98279c9/ISOSimple.msiin 1 report
- 14e3376befd4b7b5…b19b243fe335in 1 report
- c4603646701069eb…3fcc6b88d0b7in 1 report
- 6761aad48a3f9872…1b6366a371fcin 1 report
- e58831766e8d4313…40e39ad0d1fbin 1 report
- b77575413c0f97ea…aaaedc0442fein 1 report
- eff5d63ddf181396…957a33e43764in 1 report
- 9c615db040b88c18…7a6992fdbb8din 1 report
- 54c94f85ba6e9509…d60ec38edf31in 1 report
- e614b7d5a7a363fb…bdb5015ac53bin 1 report
- 20c7befc174a6111…32f55b315f53in 1 report
- ab65bbfc505dbe1c…e3fc2a0c7907in 1 report
- 278e2f3e2f26c186…8619245d8c48in 1 report
- 91a22cf315494489…d8d8eefb0fe2in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.