← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign | Koi Blog
WHITE CyberHunter_NL 2025-12-03 Modified: 2025-12-03
8
IOCs
LOW VOLUME
shadypandamasterchromeedgemicrosoft edgewetabrce backdoorfeaturedjavascriptphasezhangbaidu
Indicators of Compromise (8)
All domain hostname
TYPEINDICATORDESCRIPTIONCREATED
domain cleanmasters.store — 2025-12-03
domain dergoodting.com — 2025-12-03
domain extensionplay.com — 2025-12-03
domain yearnnewtab.com — 2025-12-03
hostname api.cgatgpt.net — 2025-12-03
hostname api.cleanmasters.store — 2025-12-03
hostname api.extensionplay.com — 2025-12-03
hostname nossl.dergoodting.com — 2025-12-03
References (1)
↗ https://www.koi.ai/blog/4-million-browsers-infected-inside-shadypanda-7-year-malware-campaign