← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Clone by Tr1sa111
WHITE msudosos 2026-03-09 Modified: 2026-03-11
28
IOCs
MEDIUM VOLUME
social engineeringgoogle adsclaude codeinstallfixmalvertisingamatera stealer
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Amatera Stealer
Indicators of Compromise (28)
All FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 8d2d275360adedecfbbd91567daddeed80d20aceb8aa4320d06a21486493945b — 2026-03-09
URL http://contatoplus.com/curl/8d2d275360adedecfbbd91567daddeed80d20aceb8aa4320d06a21486493945b — 2026-03-09
URL http://saramoftah.com/curl/958ca005af6a71be22cfcd5de82ebf5c8b809b7ee28999b6ed38bfe5d19420 — 2026-03-09
URL https://claude.update-version.com/claude — 2026-03-09
URL https://saramoftah.com/n8n/update — 2026-03-09
URL https://some.website — 2026-03-09
domain claude-code-macos.com — 2026-03-09
domain contatoplus.com — 2026-03-09
domain sarahmoftah.com — 2026-03-09
domain saramoftah.com — 2026-03-09
domain some.website — 2026-03-09
hostname claude.update-version.com — 2026-03-09
domain claude-code-macos.com — 2026-03-09
hostname asdasdasdadsvvvvv.pages.dev — 2026-03-09
hostname cladueall.pages.dev — 2026-03-09
hostname claud-code.pages.dev — 2026-03-09
hostname claude-code-docs-dvlr2jpuuw.edgeone.app — 2026-03-09
hostname claude-code-docs-site.pages.dev — 2026-03-09
hostname claude-code-install.squarespace.com — 2026-03-09
hostname claudecode-developers.squarespace.com — 2026-03-09
hostname claulastver.squarespace.com — 2026-03-09
hostname nnnnnnnnnnnnnnnnnnnnn.pages.dev — 2026-03-09
hostname vdsafsaf.it.com — 2026-03-09
hostname myclauda.it.com — 2026-03-09
hostname jhgyuifyfiguohi.pages.dev — 2026-03-09
hostname hgjbulk.pages.dev — 2026-03-09
URL https://www.justice.gov/opa/pr/united-states-leads-dismantlement-one-worlds-largest-hacker-forums#:~:text=“The%20FBI%2C%20Europol%2C%20and,on%20American%20businesses%20and%20individuals. — 2026-03-10
URL https://play-lh.googleusercontent.com/Eh-N9HKWJgQ4Oa5wmhaE5RbHkB3m3Ud9tsW6saUHis05BL7Xnpubi5iamR5lDKd-Ew%3Dw600-h300-pc0xffffff-pd — 2026-03-11
References (1)
↗ https://pushsecurity.com/blog/installfix/