Pulse Detail — Threat Intelligence

PULSE NAME

Fake clean myMac clone by Tr1sa111

WHITE msudosos 2026-03-09 Modified: 2026-03-11

IOCs

LOW VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

SHub Stealer MacSync Stealer Odyssey Stealer Atomic Stealer

Indicators of Compromise (10)

All URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	http://res2erch-sl0ut.com/debug/payload.applescript	—	2026-03-09
URL	http://res2erch-sl0ut.com/gate	—	2026-03-09
URL	http://wallets-gate.io/api/injection	—	2026-03-09
domain	cleanmymacos.org	—	2026-03-09
domain	res2erch-sl0ut.com	—	2026-03-09
domain	wallets-gate.io	—	2026-03-09
URL	https://www.mauicounty.gov/CivicAlerts.aspx?CID=6	—	2026-03-10
URL	https://www.bleepingcomputer.com/news/security/fbi-warns-of-phishing-attacks-impersonating-us-city-county-officials/#:~:text=Sergiu%20Gatlan,peer%20payment%2C%20or%20cryptocurrency."	—	2026-03-10
URL	https://www.justice.gov/opa/pr/united-states-leads-dismantlement-one-worlds-largest-hacker-forums#:~:text=“The%20FBI%2C%20Europol%2C%20and,on%20American%20businesses%20and%20individuals.	—	2026-03-10
URL	https://play-lh.googleusercontent.com/Eh-N9HKWJgQ4Oa5wmhaE5RbHkB3m3Ud9tsW6saUHis05BL7Xnpubi5iamR5lDKd-Ew%3Dw600-h300-pc0xffffff-pd	—	2026-03-11

References (1)