Essential information

Value / Name

base.msteamsapi.com

Confidence

100/100

Revoked

Yes

Valid from

03/09/2024 10:02

Valid until

17/12/2025 09:02

Pattern type

stix

Published

21/12/2025 06:54

Modified

21/12/2025 06:54

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'base.msteamsapi.com']

Labels / Tags

Labels: apt backdoor cobalt strike com hijacking dll side-loading human rights persistence steganography vietnam

Marking (TLP)

TLP:CLEAR