Skip to main content

FAKEUPDATES

Malware Family

141 indicators of compromise attributed to FAKEUPDATES across abuse.ch threat intelligence feeds.

Domains

118

IPs

14

URLs

9

Hashes

0

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (118)IPs (14)URLs (9)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CPayload Delivery

Sample indicators

IndicatorType
cdn14.quran.edu.eu.orgdomain
prime.destroythebrainonline.comdomain
learningforlifecenter.orgdomain
exdesa.comdomain
kemlongkidsdental.orgdomain
minjeff.comdomain
jacommunicationsllc.comdomain
evenements.sudouest.frdomain
api-workers.westinsinsurance.comdomain
speed-optimizer.comdomain
parish.menberetsebaotholytrinityeotc.orgdomain
app-front.anmaradigital.comdomain
dummy-tf-test-dummy-2t4navcd.exampledomain
support.grovecityelectrician.comdomain
pa-upd.mariomilan.comdomain
advd-api.horecaculinarystudio.comdomain
pa-portal.gloshex.comdomain
libraryadvances.comdomain
st-attr.robstuder.orgdomain
embed-api.joelbaueronline.comdomain
86.124.168.48ip
86.124.168.255ip
51.15.16.116ip
172.94.9.102ip
185.193.48.39ip
138.124.79.146ip
170.130.55.64ip
213.177.179.94ip
216.151.165.201ip
166.88.182.64ip
157.112.78.134ip
184.162.20.200ip
95.133.228.51ip
151.236.16.211ip
https://promo.summat10n.org/azEUdRATdxwPEy5HXAY4VxkTLlcGVmUHDkNuDBFdeAEHSDYIurl
https://jqueryapihelpers.com/ZRk5hZRslW1-tkY60uruimakLJ1zQfozs9hIZwdPPcburl
http://simplisticpride.comurl
https://libraryadvances.com/nojurl
https://speed-optimizer.com/scripts/core.min.jsurl
https://content-website-analytics.com/script.jsurl
https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsueyurl
http://ukrbaz.comurl
https://libraryadvances.com/osurl