New #NoName DDoS client details and C2 server: https://pastebin.com/psKHZzVs
IP is 94.131.97.202 and hardcoded into client again - ISP https://stark-industries.solutions/
They have only a fraction of hosts checking in so far, let's nuke from orbit. #threatintel
Kevin Beaumont /
npub176…fkwlw
2024-01-20 15:26:23
in reply to nevent1q…58ns
Author Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlwPublished at
2024-01-20 15:26:23Event JSON
{
"id": "883be556cb4f4a9301ece6b582b0b32f71ed92e1b12a359541a983237d9a86ac",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1705764383,
"kind": 1,
"tags": [
[
"e",
"68b78c0aa3192497ae68b0411690a9e3d22057e5eaedab201063cf4a6678764c",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"noname"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/111788974637289906",
"activitypub"
]
],
"content": "New #NoName DDoS client details and C2 server: https://pastebin.com/psKHZzVs\n\nIP is 94.131.97.202 and hardcoded into client again - ISP https://stark-industries.solutions/\n\nThey have only a fraction of hosts checking in so far, let's nuke from orbit. #threatintel",
"sig": "20c690f468a083685201356aba1e07b06e637fdd9d03fbead6955f66c236c7697f69fe0ee75bc73e26ff8fb976fc3aad1ab94b43959d110e7952e308ff751596"
}