← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Victims risk AsyncRAT infection after being redirected to fake Booking.com sites | Malwarebytes
WHITE CyberHunter_NL 2025-06-03 Modified: 2025-06-03
14
IOCs
MEDIUM VOLUME
browser guardcaptchacaptcha promptjavascriptrun commandchromemalwarebytesheadswellcaptcha formtrojanprotect
Indicators of Compromise (14)
All domain hostname
TYPEINDICATORDESCRIPTIONCREATED
domain bkngnet.com — 2025-06-03
domain chargesguestescenter.com — 2025-06-03
domain extranet-listing.com — 2025-06-03
domain guestalerthelp.com — 2025-06-03
domain guestsalerts.com — 2025-06-03
domain gustescharge.com — 2025-06-03
domain hekpaharma.com — 2025-06-03
domain kvhandelregis.com — 2025-06-03
domain partnervrft.com — 2025-06-03
domain patheer-moreinfo.com — 2025-06-03
domain property-paids.com — 2025-06-03
domain rewiewqproperty.com — 2025-06-03
domain rewiewwselect.com — 2025-06-03
hostname badgustrewivers.com.com — 2025-06-03
References (1)
↗ https://www.malwarebytes.com/blog/news/2025/06/victims-risk-asyncrat-infection-after-being-redirected-to-fake-booking-sites