216.73.217.80

Indicator (IOC)

stix Revoked AlienVault · Published 01/04/2026 17:26 · Modified 30/04/2026 20:59

Essential information

Value / Name
http://sfrclak.com:8000/6202033
Confidence
100/100
Revoked
Yes
Valid from
01/04/2026 15:16
Valid until
30/04/2026 20:59
Pattern type
stix
Published
01/04/2026 17:26
Modified
30/04/2026 20:59
Author / Source
AlienVault

Description

No description.

Pattern

[url:value = 'http://sfrclak.com:8000/6202033']

Labels / Tags

Labels: axios axios library cross-platform rat dprk attribution javascript trojan npm npm hijacking plain-crypto-js post-install execution supply chain supply chain attack waveshaper waveshaper overlap

Marking (TLP)

TLP:CLEAR