← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Who Broke NPM?: Malicious Packages Flood Leading to Denial of Service
WHITE CyberHunterAutoFeed 2023-04-11 Modified: 2023-04-11
33
IOCs
MEDIUM VOLUME
OSINTnpmSEO PoisoningDenial of ServiceCryptoT1129T1059T1574.002T1036T1056T1071T1195.002
Indicators of Compromise (33)
All URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://15.204.49.142/files/123.exe — 2023-04-11
URL http://163.123.143.4/download/Service.vmp — 2023-04-11
URL http://163.123.143.4/download/Service_.vmp — 2023-04-11
URL http://163.123.143.4/download/WWW14.bmp — 2023-04-11
URL http://193.233.20.29/games/category/Plugins/clip.dll — 2023-04-11
URL http://193.233.20.29/games/category/Plugins/cred.dll — 2023-04-11
URL http://193.233.20.29/games/category/index.php — 2023-04-11
URL http://193.233.20.35/gallery/photo_007.exe — 2023-04-11
URL http://194.110.203.101/puta/brazilx86.exe — 2023-04-11
URL http://208.67.104.60/api/firegate.php — 2023-04-11
URL http://208.67.104.60/api/tracemap.php — 2023-04-11
URL http://230320051222585.btl.jbc75.shop/f/fsbm0320.exe — 2023-04-11
URL http://45.12.253.56/advertisting/plus.php?s=NOSUB&str=mixtwo&substr=mixinte — 2023-04-11
URL http://45.12.253.72/default/puk.php — 2023-04-11
URL http://45.12.253.72/default/stuk.php — 2023-04-11
URL http://45.12.253.74/pineapple.php?pub=mixinte — 2023-04-11
URL http://45.12.253.75/dll.php — 2023-04-11
URL http://65.109.226.91/0ab626f8f67208ad.php — 2023-04-11
URL http://94.142.138.113/api/firecom.php — 2023-04-11
URL http://94.142.138.113/api/tracemap.php — 2023-04-11
URL http://94.142.138.131/api/firegate.php — 2023-04-11
URL http://94.142.138.131/api/tracemap.php — 2023-04-11
URL http://aapu.at/tmp/ — 2023-04-11
URL http://hugersi.com/dl/6523.exe — 2023-04-11
URL http://ji.ghwiwwff.com/m/oskg25 — 2023-04-11
URL http://potunulit.org/ — 2023-04-11
domain aapu.at — 2023-04-11
hostname api2.check-data.xyz — 2023-04-11
domain bebekmanti.com — 2023-04-11
domain beelowers.com — 2023-04-11
domain iplis.ru — 2023-04-11
domain potunulit.org — 2023-04-11
hostname server13.cdneurops.pics — 2023-04-11
References (1)
↗ https://community.riskiq.com/article/a45cbd2f