Essential information

Value / Name

boiksal.com

Confidence

100/100

Revoked

Yes

Valid from

05/09/2025 12:46

Valid until

31/01/2026 11:41

Pattern type

stix

Published

20/12/2025 19:59

Modified

31/01/2026 11:42

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'boiksal.com']

Labels / Tags

Labels: booking.com botnet c2 communication castlebot castleloader castlerat clickfix keylogging logistics lumma stealer malware-as-a-service matanbuchus netsupport rat nightshadec2 phishing sandbox evasion sectoprat trojanized software uac bypass warmcookie

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.