hxxps://miportuarios[.]com/sisti/config.phpURL
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 11 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C“… it generates a unique session identifier and establishes contact with its command-and-control (C&C) infrastructure at hxxps://miportuarios[.]com/sisti/config.php to download operational parameters including target lists, message templates, and timing configurations.”
Indicators reported together
named in the same reports- miportuarios[.]comin 1 report
Copy this indicator · defanged
Thanks — we review every report.