Essential information

Value / Name

doauthentication.do

Confidence

100/100

Revoked

No

Valid from

09/07/2026 15:20

Valid until

04/12/2026 14:16

Pattern type

stix

Published

10/07/2026 09:32

Modified

10/07/2026 09:33

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'doauthentication.do']

Labels / Tags

Labels: citrixbleed 2 cve-2025-5777 dragonforce impacket initial access broker mimikatz netscaler privilege escalation ransomware screenconnect session hijacking

Marking (TLP)

TLP:CLEAR