ctrlINT What the industry said about every indicator, with the quote

hxxp://safestaticfirefox[.]com/uacuxuiaeoerkaryixjuURL

Reported by 1 independent source · first reported by Group-IB · last reported

Last reported 6 years ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “The payload is CobInt stager that will download Cobalt Strike beacon from hxxp://safestaticfirefox[.]com/uacuxuiaeoerkaryixju.”

    Group-IBVendor
    A Shortcut to Compromise: Cobalt Gang phishing campaign

Indicators reported together

named in the same reports
Copy these 8 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with hxxp://safestaticfirefox[.]com/uacuxuiaeoerkaryixju here?
No account needed. We do not store your IP address.