Essential information

Value / Name

2fgithub.com

Confidence

100/100

Revoked

Yes

Valid from

28/03/2025 16:56

Valid until

23/08/2025 17:52

Pattern type

stix

Published

20/12/2025 23:25

Modified

30/01/2026 09:19

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = '2fgithub.com']

Labels / Tags

Labels: accellion fta asia badiis bitm black lotus browser-in-the-middle chinese-speaking cluster cobalt strike cybercrime data theft dll sideloading gotohttp gthost hiatusrat hyperhosting iis iis servers kvbotnet lnk lnk files lua script lumen ip meterpreter mips netgear prosafe payload server persistence phishing powershell

Marking (TLP)

TLP:CLEAR