Essential information

Value / Name

word.msapp.workers.dev

Confidence

100/100

Revoked

Yes

Valid from

10/06/2025 12:58

Valid until

15/05/2026 21:40

Pattern type

stix

Published

20/12/2025 19:56

Modified

15/05/2026 21:41

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'word.msapp.workers.dev']

Labels / Tags

Labels: china cyberespionage google calendar plusdrop plusinject spear-phishing state-sponsored

Marking (TLP)

TLP:CLEAR