Essential information

Value / Name

www.phlovel.ru

Confidence

100/100

Revoked

Yes

Valid from

10/04/2025 21:46

Valid until

16/03/2026 05:29

Pattern type

stix

Published

21/12/2025 13:28

Modified

16/03/2026 05:30

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'www.phlovel.ru']

Labels / Tags

Labels: apt armageddon c server cloudflare tunnels desktop folder gamaredon gammasteel infostealer powershell shuckworm spearphishing ukraine

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.