Essential information

Value / Name

ordai.quest

Confidence

100/100

Revoked

Yes

Valid from

29/07/2024 12:59

Valid until

25/05/2025 12:59

Pattern type

stix

Published

20/12/2025 19:45

Modified

21/12/2025 06:08

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'ordai.quest']

Labels / Tags

Labels: action rat apt crimson rat cve-2022-0847 discord disgomoji espionage geta rat golang india linux pakistan poseidon privilege escalation reverse rat

Marking (TLP)

TLP:CLEAR