216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 18/05/2026 20:26 · Modified 17/06/2026 01:36

Essential information

Value / Name
http://hebsbsbzjsjshduxbs.xyz/api/bot/heartbeat
Confidence
100/100
Revoked
Yes
Valid from
18/05/2026 19:52
Valid until
17/06/2026 01:35
Pattern type
stix
Published
18/05/2026 20:26
Modified
17/06/2026 01:36
Author / Source
AlienVault

Description

No description.

Pattern

[url:value = 'http://hebsbsbzjsjshduxbs.xyz/api/bot/heartbeat']

Labels / Tags

Labels: amos atomic macos stealer backdoor credential harvesting cryptocurrency theft infostealer macos persistence mechanism shub reaper shub stealer social engineering typosquatting

Marking (TLP)

TLP:CLEAR