Essential information

Value / Name

jsonserv.xyz

Confidence

100/100

Revoked

Yes

Valid from

12/12/2025 11:09

Valid until

09/05/2026 12:04

Pattern type

stix

Published

21/12/2025 20:01

Modified

09/05/2026 12:04

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'jsonserv.xyz']

Labels / Tags

Labels: android android banking trojan apk credential theft e-challan financial fraud firebase c2 identity theft india targeting kycshadow otp interception otp theft rto challan / e-challan sms interception social engineering vpn abuse vpn manipulation whatsapp whatsapp distribution

Marking (TLP)

TLP:CLEAR