hxxp://38.244.50[.]120:18899/.claude/CLAUDE.md.%E2%80%9DURL
Reported by 1 independent source · first reported by Security Affairs · last reported
Last reported 15 days ago
What the reports say
1 report, newest first · the exact sentence from each-
AI-Driven tool ARTEX used in attacks against South Korean Banks“…the activity described and hosted an ARTEX instance and open directory containing a Claude Code markdown document at hxxp://38.244.50[.]120:18899/.claude/CLAUDE.md.” continues the report.”
Indicators reported together
named in the same reports- 38.244.50[.]120in 1 report
- xcai[.]proin 1 report
- 101.53.80[.]20in 1 report
- 205.214.59[.]31in 1 report
- 124.155.252[.]63in 1 report
- 154.201.79[.]246in 1 report
- 23.248.249[.]90in 1 report
- 23.158.220[.]98in 1 report
- 103.248.148[.]84in 1 report
- 203.160.133[.]172in 1 report
- 209.209.85[.]38in 1 report
Copy these 11 indicators · defanged
Thanks — we review every report.