Indicators of Compromise

Trojan.DriveSurge

Namens1.erans.ru

ali.miri@ryerson.ca

header.server

banner-js.php

http:///ce3cbfc887?force=1

http:///ce3cbfc887?force=17aa15de93cf85729ddf970e8d7897f69ece3ca29608f73e784a9ba40c9cea18d

http:///66856ca57ed?force=18ecc7108cd679316bf5900e84f19b256dc399902cdede646493f502ac872cc1a

http:///e97b7f7ccab3a?force=1e1ce4e6222396a58d13dddfe64c1dd21f1632bcbe11d1867d44bab4fc646883a

loader.py

147.45.42.200

t.js

login.php

46.226.166.57

tempmail.so

Update.exe

91.92.240.127

banerpanel.live

http://newtdsone.shop/jsrepo?rnd=

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

ycyfugihih.cfd

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

f3926add1a4531ff324a6acb57d40769

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

http://bseolized.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

beacontrace.bond

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

bseolized.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

eraggifts.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

jcdlforwarding.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

jclforwarding.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

testio.ecartdev.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

webgleam.info

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

brightson.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

datumprobe.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

keyview.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

traceglimpse.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

coverlink.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

tracekey.icu

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

0ca424475803a1cb54908a81a00bd93f

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

a4f0014474278238b5fe78fc2c4182b498012a33

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

0c62c11e910d7c0d6b6c9800b70e78bfd9220e1f78bd7bb34ae4c3646d05f6e5

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

29ac78c51bcdfe68c64830bdeb6e41437dd55e2691149741c9b78be03b6c82ea

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

428bd0b0ac36dfdd223b3953dbe61c0baf227f893310b03e7afe3111462019c6

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

7aa15de93cf85729ddf970e8d7897f69ece3ca29608f73e784a9ba40c9cea18d

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

90aecb370dfb1a99a1f7de0a9c6842ab1b664521fddea16b0ec9a91f322646fc

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

a84b032b49773c2318b11b1164d1aada69e940229aedbf8185c33fc7dd1d2cdf

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

captioto.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

newtdsone.shop

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

maxintora.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

check.first-node.rocks

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

cptoptious.com

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

ztds.info

A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites