Essential information

Value / Name

api.gupdate.net

Confidence

100/100

Revoked

Yes

Valid from

28/08/2024 16:08

Valid until

11/12/2025 15:08

Pattern type

stix

Published

20/12/2025 19:46

Modified

21/12/2025 06:42

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'api.gupdate.net']

Labels / Tags

Labels: advanced persistent threat alphv blackcat credential theft credential-theft cve-2019-19781 cve-2022-1388 cve-2023-3519 cve-2024-21887 cve-2024-24919 cve-2024-3400 encrypted communication firewall compromise iran lateral movement meshagent noberus noescape ransomhouse ransomware state-sponsored webshells

Marking (TLP)

TLP:CLEAR