SPAM (1) campaign cataloged at 2026-01-05(2).
- advertisements, spam packages etc.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2026-01-elleuch¶
Package exfiltrates content of /flag* files to a hardcoded remote location. There is no other functionality, which suggests it's probably related to some kind of CTF and does not present risk to other users.
Abuse categories¶
other
Campaign uses other.
IoCs & related URLs¶
URLs with payloads, characteristic domains, C&C IPs, repositories with malicious code, etc.
qblvyk0b.instances.httpworkbench.com