Essential information

Value / Name

song.th

Confidence

100/100

Revoked

Yes

Valid from

04/09/2025 19:54

Valid until

30/01/2026 18:50

Pattern type

stix

Published

21/12/2025 01:58

Modified

30/01/2026 18:50

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'song.th']

Labels / Tags

Labels: andariel apt blackrat clickfix contagiousdrop cryptocurrency cyber espionage infrastructure monitoring job seeker targeting lazarus lilith rat log4shell north korea nukesped social engineering tigerrat

Marking (TLP)

TLP:CLEAR