hxxps://foxy580.github[.]io/koko/file.dllURL
Reported by 1 independent source · first reported by ESET WeLiveSecurity · last reported
Last reported 8 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan“The third file – a DLL file hosted at hxxps://foxy580.github[.]io/koko/file.dll – served as the payload in a separate ClickFix-based attack.”
Indicators reported together
named in the same reports- hxxps://hitpak[.]org/notepad2.dllin 1 report
- hitpak[.]orgin 1 report
- foxy580.github[.]ioin 1 report
- hxxps://buildthenations[.]info/PKCERT/pkcert.htmlin 1 report
- buildthenations[.]infoin 1 report
- hxxps://hitpak[.]org/page.php?tynor=in 1 report
- b15b1f3f2227eba4…df34b9d30b6ain 1 report
- 8b103d0aa37e5297…fd4f6b2ecbaain 1 report
- 188.114.96[.]10in 1 report
Copy these 9 indicators · defanged
Thanks — we review every report.