What Is the BabaDeda Loader? Analysis of a New ClickFix Malware Campaign
· Published 03/07/2026 15:00
Essential information
- Published
- 03/07/2026 15:00
- Modified
- —
- Source / Author
- AlienVault
- Confidence
- 100/100
- Report type(s)
- threat-report
- Related entities
- 33 indicators, 14 observables, 10 techniques (mitre)
Description
No description.
Related entities
Vulnerabilities, IOCs, intrusion sets, MITRE techniques and other entities referenced in this report.
Indicators (33)
-
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100
Arechclient2 CC=IE ASN=AS25441 imagine communications group limited
· Valid until 27/07/2026 · Source: AlienVault -
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100
Cabinet_Archive
· Valid until 29/06/2027 · Source: AlienVault -
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
-
stix 100/100
CC=GB ASN=AS786 jisc services limited
· Valid until 27/07/2026 · Source: AlienVault -
stix 100/100· Valid until 29/06/2027 · Source: AlienVault
Observables (14)
-
cirealci.com -
humansbad2026.com -
91.92.243.161 -
95.163.152.190 -
77.238.248.158 -
94.26.83.190 -
158.94.208.92 -
158.94.208.104 -
89.124.81.216 -
http://94.26.83.190:6600/t36umsn9/DataRescueCommunity -
http://89.124.81.216:9000/wbinjget?q=B2E581C85432BD4DF6A59A00CBDA1CB3 -
http://91.92.243.161:3038