hxxps://llll[.]fit/ioURL
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 16 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Chasing Eddies: New Rust-based InfoStealer used in CAPTCHA campaigns“Its functionality is fairly simple: fetching an executable (EDDIESTEALER) from hxxps://llll[.]fit/io and saving the file under the user’s Downloads folder with a pseudorandom 12-character file name.”
Indicators reported together
named in the same reports- hxxps://llll[.]fit/version/in 1 report
- llll[.]fitin 1 report
- hxxps://github[.]com/N0fix/rustbinsignin 1 report
- hxxps://docs[.]rs/hashbrown/latest/hashbrown/in 1 report
- hxxps://docs[.]rs/rustc-demangle/latest/rustc_demangle/in 1 report
- hxxps://docs[.]rs/tinyjson/latest/tinyjson/in 1 report
- hxxps://docs[.]rs/tokio-tungstenite/latest/tokio_tungstenite/in 1 report
- hxxps://docs.binary[.]ninja/dev/uidf.htmlin 1 report
- docs.binary[.]ninjain 1 report
- hxxps://github[.]com/hasherezade/tiny_tracerin 1 report
- hxxps://github[.]com/leandrofroes/bn_iflin 1 report
- 47409e09afa05fcc…e2029e1959d0in 1 report
- 162a8521f6156070…4305cb3e163fin 1 report
- f8b4e2ca107c4a91…da0eff793e7ain 1 report
- 53f803179304e4fa…a7f35f5bc23din 1 report
- 20eeae4222ff11e3…56997f30aaf9in 1 report
- 1bdc2455f32d7405…ed231c35b9a2in 1 report
- d905ceb30816788d…b26ed5520daain 1 report
- b8b379ba5aff7e4e…83518cb989a7in 1 report
- f6536045ab63849c…2db1f1a370f2in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.