Essential information

Value / Name

http://briefing.romnor.ca/go

Confidence

100/100

Revoked

No

Valid from

13/07/2026 12:36

Valid until

11/08/2026 18:19

Pattern type

stix

Published

13/07/2026 12:52

Modified

13/07/2026 12:52

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://briefing.romnor.ca/go']

Labels / Tags

Labels: aitm asyncrat evilginx madoo blaster oauth abuse phishing infrastructure rmm tools

Marking (TLP)

TLP:CLEAR