Essential information

Value / Name

saramoftah.com

Confidence

100/100

Revoked

No

Valid from

09/03/2026 10:42

Valid until

04/08/2026 11:38

Pattern type

stix

Published

09/03/2026 11:00

Modified

08/05/2026 11:17

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'saramoftah.com']

Labels / Tags

Labels: amatera stealer applescript claude code clickfix google ads infostealer installfix macos malvertising phantompulse shub stealer social engineering

Marking (TLP)

TLP:CLEAR