Essential information

Value / Name

update-teams.live

Confidence

100/100

Revoked

No

Valid from

22/04/2026 03:40

Valid until

17/09/2026 03:36

Pattern type

stix

Published

22/04/2026 10:59

Modified

13/05/2026 18:14

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'update-teams.live']

Labels / Tags

Labels: browser stealing clickfix credential theft fintech targeting mach-o binaries mach-o man macos pylangghostrat social engineering telegram exfiltration

Marking (TLP)

TLP:CLEAR