Essential information

Value / Name

pdf-online.top

Confidence

100/100

Revoked

Yes

Valid from

02/07/2025 14:28

Valid until

27/11/2025 13:23

Pattern type

stix

Published

20/12/2025 19:42

Modified

21/12/2025 14:45

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'pdf-online.top']

Labels / Tags

Labels: bellingcat execution techniques exploit facebook http-shell httpshell lnk dropper lnk file lnk files malicious malware phishing powershell reverseshell russia shell shortcut ukraine windows zip dropper

Marking (TLP)

TLP:CLEAR