Essential information

Value / Name

http://43.229.55.44/sophosfirewallupdate.com

Confidence

100/100

Revoked

Yes

Valid from

31/10/2024 20:46

Valid until

17/12/2024 20:46

Pattern type

stix

Published

20/12/2025 19:48

Modified

21/12/2025 08:09

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://43.229.55.44/sophosfirewallupdate.com']

Labels / Tags

Labels: asia-pacific targets asnarök backdoors china-based threat actors cloud snooper critical infrastructure cve-2020-12271 cve-2020-15069 cve-2020-29574 cve-2022-1040 cve-2022-1292 cve-2022-3236 gh0st rat government agencies libsophos.so onderon perimeter devices rootkits sliver zero-day vulnerabilities

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.