Post #4270443
2026-07-31 07:45 UTC
Update:
The two zgRAT IOCs that are less than 6 months old were reported as false positives on ThreatFox. The first one has now been re-classified as PureRAT, while the second one is marked as (Unknown malware)[https://threatfox.abuse.ch/ioc/1750083/]. The reason for the Unknown tag is probably because there is not yet a #PureMiner tag on Malpedia.
Replies (1)
-
@netresec@infosec.exchange 2026-08-03 16:11
Update: There is now a win.pureminer malware family Malpedia, and 194.169.175.191:39002 has now been updated to the correct PureMiner tag on ThreatFox. 🎉 💃 😎