Essential information

Value / Name

https://airbluefootgear.com/wp-includes/images/xits.php

Confidence

100/100

Revoked

Yes

Valid from

16/04/2025 16:00

Valid until

02/06/2025 16:00

Pattern type

stix

Published

20/12/2025 20:00

Modified

21/12/2025 18:15

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://airbluefootgear.com/wp-includes/images/xits.php']

Labels / Tags

Labels: berserkstealer clickfix credential stealer double extortion fake updaters interlock ransomware interlock rat lumma powershell backdoor ransomware remote access trojan

Marking (TLP)

TLP:CLEAR