← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Malvertising campaign leads to info stealers hosted on GitHub | Microsoft Security Blog
WHITE CyberHunter_NL 2025-03-07 Modified: 2025-04-06
320
IOCs
HIGH VOLUME
Microsoft Security is a comprehensive and comprehensive guide to the company's products, services and services, as well as an analysis and analysis of how they might be used to steal information from users.
ipaddresstimestamptableadditionalinfoprojectgithubtimegeneratedmicrosoftuseragentpowershellautoitlumma stealerdefenderpathdiscorddoeneriumnsisencryptpsexecservicesuspiciousanomalysentineltwitterlummanetsupport
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Lumma NetSupport
Indicators of Compromise (59 / 320 total)
All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://keikochio.com/staz/gribs.zip — 2025-03-07
URL https://desi-porn.tube/ — 2025-03-07
URL https://kassalias.com/pageagain/ — 2025-03-07
URL https://lumdukekiy.shop — 2025-03-07
URL https://lumquvonee.shop 228cca16741b1a6dbb94d92588d674e25848464c1180548c9a6d12e304406ece 2025-03-07
URL http://79.132.128.77/fakeurl.htm — 2025-03-07
URL http://89.23.96.126/?v=3&event=ready&url=http://188.245.94.250:443/auto/28cd7492facfd54e11d48e52398aefa7/251.exe — 2025-03-07
URL http://keikochio.com/incall.php?=compName= — 2025-03-07
URL https://afterpm.com/pricedpage/ — 2025-03-07
URL https://ageless-skincare.com/gn/ — 2025-03-07
URL https://ak.ptailadsol.net/partitial/ — 2025-03-07
URL https://clarebrownmusic.com/goodday/ — 2025-03-07
URL https://compass-point-yachts.com/nicepage77/pro77.php — 2025-03-07
URL https://covery-mover.biz — 2025-03-07
URL https://cumpaicizewoa.net/partitial/ — 2025-03-07
URL https://dare-curbys.biz — 2025-03-07
URL https://dreamstorycards.com/amzpage/ — 2025-03-07
URL https://dreasd.xyz — 2025-03-07
URL https://dwell-exclaim.biz — 2025-03-07
URL https://eaholloway.com/updatepage333/ — 2025-03-07
URL https://egrowz.com/webview/ — 2025-03-07
URL https://enricoborino.com/propage66/ — 2025-03-07
URL https://formy-spill.biz — 2025-03-07
URL https://gostrm.shop — 2025-03-07
URL https://ikores.sbs — 2025-03-07
URL https://impend-differ.biz — 2025-03-07
URL https://kefuguy.shop — 2025-03-07
URL https://klipcatepiu0.shop — 2025-03-07
URL https://klipcatepiu0.shop/int_clp_sha.txt — 2025-03-07
URL https://lakeplacidluxuryhomes.com/webpage37 — 2025-03-07
URL https://lilharts.com/propage6/ — 2025-03-07
URL https://marshal-zhukov.com — 2025-03-07
URL https://mycomp.cyou — 2025-03-07
URL https://nationpains.com/safeweb3/ — 2025-03-07
URL https://olopruy.com/ — 2025-03-07
URL https://or-ipo.com/nice/ — 2025-03-07
URL https://physicaltherapytustin.com/web-X/ — 2025-03-07
URL https://physicaltherapytustin.com/webhtml/ — 2025-03-07
URL https://pmpdm.com/webcheck35/ — 2025-03-07
URL https://praxlonfire73.live — 2025-03-07
URL https://primetimeessentials.com/newpagyes/ — 2025-03-07
URL https://pub.culture-quest.shop — 2025-03-07
URL https://razorskigrips.com/gn/ — 2025-03-07
URL https://razorskigrips.com/goodk/ — 2025-03-07
URL https://razorskigrips.com/newnewpage/ — 2025-03-07
URL https://razorskigrips.com/perfect/ — 2025-03-07
URL https://sacpools.com/pratespage/ — 2025-03-07
URL https://se-blurry.biz — 2025-03-07
URL https://shortlearn.click — 2025-03-07
URL https://silversky.club — 2025-03-07
URL https://startherehosting.net/todaypage/ — 2025-03-07
URL https://statsace.com/web_us/ — 2025-03-07
URL https://stocktemplates.net/input.php?compName= — 2025-03-07
URL https://tailyoveriw.my — 2025-03-07
URL https://thegay.com/ — 2025-03-07
URL https://ukuhost.net — 2025-03-07
URL https://violettru.click — 2025-03-07
URL https://wrathful-jammy.cyou — 2025-03-07
URL https://zinc-sneark.biz — 2025-03-07
References (1)
↗ https://www.microsoft.com/en-us/security/blog/2025/03/06/malvertising-campaign-leads-to-info-stealers-hosted-on-github/