hxxps://cdn.discordapp[.]com/attachments/1402685029678579857/1410251798123511808/AGT27.txt?ex=68b056d5&is=68af0555&hm=3ef2cf8f65a9a6f4955ecd0292af0cd68e65864907d07543c416ab28a2acfa6d&TheURL
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 10 months ago
What the reports say
1 report, newest first · the exact sentence from each-
BlindEagle Targets Colombian Government Agency with Caminho and DCRAT“…;AGT27.txt from the following Discord URL:hxxps://cdn.discordapp[.]com/attachments/1402685029678579857/1410251798123511808/AGT27.txt?ex=68b056d5&is=68af0555&hm=3ef2cf8f65a9a6f4955ecd0292af0cd68e65864907d07543c416ab28a2acfa6d&The URL is obfuscated, encoded in Base64 and…”
Indicators reported together
named in the same reports- detection[.]inin 1 report
- ydns[.]euin 1 report
- family[.]inin 1 report
- hxxps://archive[.]org/download/optimized_msi_20250821/optimized_MSI.pngin 1 report
Copy these 4 indicators · defanged
Thanks — we review every report.