216.73.216.197

Indicator (IOC)

stix Revoked AlienVault · Published 27/03/2026 00:58 · Modified 22/04/2026 16:33

Essential information

Value / Name
https://news4me.xyz/protector/johnremcos.txt
Confidence
100/100
Revoked
Yes
Valid from
24/03/2026 09:49
Valid until
22/04/2026 16:32
Pattern type
stix
Published
27/03/2026 00:58
Modified
22/04/2026 16:33
Author / Source
AlienVault

Description

No description.

Pattern

[url:value = 'https://news4me.xyz/protector/johnremcos.txt']

Labels / Tags

Labels: kramer phantomvai remcos rat scorpiorat uac bypass

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.