@james_inthe_box@infosec.exchange
Post #3537611
2026-07-02 16:15 UTC
From #clickfix -> #vidar
https://app.any.run/tasks/dac83ca5-fa36-4478-8332-2dbce48c6dbc
Replies (3)
-
@netresec@infosec.exchange 2026-07-03 19:02
@james_inthe_box@infosec.exchange Thanks! Looks like the Vidar C2 is here: 📡 172.67.216.246:443 (CLOUDFLARENET ASN 13335) 🌐 hxxps://lot.terangsm188[.]top a0e9f5d64349fb13191bc781f81f42e1 (JA3) 6d6b821affda5de6562d217770a7ead0 (JA3S) t12d190800_d83cc789557e_7af1ed941c26 (JA4)
-
@RecklessPush38671@infosec.exchange 2026-07-03 01:00
@james_inthe_box@infosec.exchange De ja vu for my day :blobcat_thisisfine:
-
@mike805@noc.social 2026-07-09 06:30
@james_inthe_box@infosec.exchange This is like mailing someone a gun along with instructions to put it to your head and pull the trigger. How do people fall for that?