hxxps://telegram[.]me/g1n3sssVidarURL
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Anthropic Claude Code Leak“…88b415610f4ae018d124ea4dc99189GhostSockshttps://steamcommunity.com/profiles/76561198721263282Vidar DDR (Dead Drop Resolvers)hxxps://telegram[.]me/g1n3sssVidar DDRhxxps://rti.cargomanbd.comVidar C2https://147.45.197.92:443GhostSocks C2https://94.228.161.88:443GhostSocks C2https://gi…”
Indicators reported together
named in the same reports- 147.45.197[.]92in 1 report
- 94.228.161[.]88in 1 report
- repositories[.]inin 1 report
- packages[.]watchin 1 report
- daemons[.]securityin 1 report
- prompts[.]buildin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2025-59536, CVE-2026-21852
Thanks — we review every report.