← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran
WHITE TeamPCP Tr1sa111 2026-03-24 Modified: 2026-03-24
7
IOCs
LOW VOLUME
docker apicanisterwormkubernetesdaemonsetwiper
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
CanisterWorm
Indicators of Compromise (7)
All URL hostname
TYPEINDICATORDESCRIPTIONCREATED
URL https://championships-peoples-point-cassette.trycloudflare.com/prop.py — 2026-03-24
URL https://souls-entire-defined-routes.trycloudflare.com/kamikaze.sh — 2026-03-24
URL https://souls-entire-defined-routes.trycloudflare.com/kube.py — 2026-03-24
hostname championships-peoples-point-cassette.trycloudflare.com — 2026-03-24
hostname investigation-launches-hearings-copying.trycloudflare.com — 2026-03-24
hostname souls-entire-defined-routes.trycloudflare.com — 2026-03-24
hostname tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io — 2026-03-24
References (1)
↗ https://www.aikido.dev/blog/teampcp-stage-payload-canisterworm-iran