Essential information

Value / Name

gupdate.net

Confidence

100/100

Revoked

Yes

Valid from

06/05/2025 21:46

Valid until

01/10/2025 21:41

Pattern type

stix

Published

20/12/2025 19:46

Modified

21/12/2025 14:08

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'gupdate.net']

Labels / Tags

Labels: advanced persistent threat apt credential harvesting credential theft credinterceptor critical infrastructure custom malware cve-2023-38950 cve-2023-38951 cve-2023-38952 encrypted communication firewall compromise hanifnet havoc hxlibrary lateral movement meshagent neoexpressrat proxy chaining remoteinjector systembc web shells

Marking (TLP)

TLP:CLEAR