Essential information

Value / Name

https://computer.kplus.com/cd.zip

Confidence

100/100

Revoked

No

Valid from

16/07/2026 13:39

Valid until

14/08/2026 19:22

Pattern type

stix

Published

17/07/2026 02:43

Modified

17/07/2026 02:43

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://computer.kplus.com/cd.zip']

Labels / Tags

Labels: asp.net web shell chisel cloudflare tunnel credential dumping double extortion it services lateral movement revsocks rust-based ransomware south asia spirals web shell

Marking (TLP)

TLP:CLEAR