Skip to main content

FAKEUPDATES

Malware Family

131 indicators of compromise attributed to FAKEUPDATES across abuse.ch threat intelligence feeds.

Domains

109

IPs

13

URLs

9

Hashes

0

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (109)IPs (13)URLs (9)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CPayload Delivery

Sample indicators

IndicatorType
expce.directoryindustry.comdomain
cf-api.indianadforum.comdomain
pa-api.salondeguitaredemontreal.comdomain
wildcatroofingtx.comdomain
exdesa.comdomain
planetogg.comdomain
kemlongkidsdental.orgdomain
galassiastudios.comdomain
eldran.comdomain
kamalrealestate.comdomain
api-workers.westinsinsurance.comdomain
stake.libertariancounterpoint.comdomain
api.ioteromixes.comdomain
parish.menberetsebaotholytrinityeotc.orgdomain
api.portimaloter.comdomain
medium.exathomeswebuytexas.comdomain
buildtoolsrvcore.comdomain
panel-api.myezwebhost.comdomain
st-dl.documentsupportservices.comdomain
img2.aixpirts.comdomain
86.124.168.48ip
86.124.168.255ip
51.15.16.116ip
172.94.9.102ip
185.193.48.39ip
138.124.79.146ip
170.130.55.64ip
213.177.179.94ip
216.151.165.201ip
166.88.182.64ip
157.112.78.134ip
184.162.20.200ip
95.133.228.51ip
https://promo.summat10n.org/azEUdRATdxwPEy5HXAY4VxkTLlcGVmUHDkNuDBFdeAEHSDYIurl
https://jqueryapihelpers.com/ZRk5hZRslW1-tkY60uruimakLJ1zQfozs9hIZwdPPcburl
http://simplisticpride.comurl
https://libraryadvances.com/nojurl
https://speed-optimizer.com/scripts/core.min.jsurl
https://content-website-analytics.com/script.jsurl
https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsueyurl
http://ukrbaz.comurl
https://libraryadvances.com/osurl