Search — “github.com”
0 stories · 8 IoCs
IoCs
| url | hxxp://github[.]com/RuoJi6/ARTEX | seen 1×, first 2026-11-05 13:12Z | ARTEX copy repo · 2026-11-05 |
| url | hxxp://github[.]com/mhtsec/ARTEX | seen 1×, first 2026-11-05 13:12Z | ARTEX copy repo (mianhuatang11/artex on Docker Hub) · 2026-11-05 |
| url | hxxp://github[.]com/trhhubsd/ARTEXX | seen 1×, first 2026-11-05 13:12Z | Copycat ARTEX repo whose docker-compose pulls backdoored tomicdd/artex · 2026-11-05 |
| url | hxxp://github[.]com/undowildcats-sketch/ | seen 1×, first 2026-11-03 17:59Z | Operator GitHub releases · 2026-11-03 |
| url | hxxp://github[.]com/Spink1984/ | seen 1×, first 2026-11-03 17:59Z | Operator GitHub releases · 2026-11-03 |
| url | hxxp://github[.]com/Aviciiii/ | seen 1×, first 2026-11-03 17:59Z | Operator GitHub releases · 2026-11-03 |
| url | hxxp://github[.]com/letters9813 | seen 1×, first 2026-10-22 13:05Z | Dead drop account (removed) · 2026-10-22 |
| url | hxxp://github[.]com/LatonyCharnleyaW | seen 1×, first 2026-10-22 13:05Z | GitHub account used by 1.1.7 payloads via API to download encrypted config files; no longer accessible · 2026-10-22 |