Essential information

Value / Name

http://217.69.3.218/get_zombi_payload/qQD%2FJoi3WCWSk8ggGHiTdg%3D%3D

Confidence

100/100

Revoked

Yes

Valid from

21/10/2025 21:16

Valid until

07/12/2025 20:16

Pattern type

stix

Published

21/12/2025 18:54

Modified

21/12/2025 18:54

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://217.69.3.218/get_zombi_payload/qQD%2FJoi3WCWSk8ggGHiTdg%3D%3D']

Labels / Tags

Labels: blockchain credential-theft extension glassworm openvsx self-propagating solana unicode vscode worm

Marking (TLP)

TLP:CLEAR