Essential information

Value / Name

www.victim.com

Confidence

100/100

Revoked

No

Valid from

23/09/2025 10:59

Valid until

28/08/2026 19:41

Pattern type

stix

Published

20/12/2025 20:00

Modified

18/02/2026 17:01

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'www.victim.com']

Labels / Tags

Labels: badiis chinese threat actor chinese-speaking dragonrank group 9 iis module iis modules operation rewrite seo poisoning vietnam web shells

Marking (TLP)

TLP:CLEAR