"This IP was acting as C2 server for a fileless PowerShell malware (Trojan.PowerShell / Boxter). Use ...
show more"This IP was acting as C2 server for a fileless PowerShell malware (Trojan.PowerShell / Boxter). Used scheduled tasks disguised as GoogleUpdaterTaskSystem47.0.7703.CL_MAIN + task MQJbLVRzvx6BzXgQx4EoGKyLa3Yz7CdmfF that auto-restores itself. Dropper: Antigravity in C:\Users\pc\AppData\Local\Programs\Antigravity. Multiple reinfections April 9-11 2026 using mshta.exe. Proxy Cloudflare: ai-proxi-b044.cdn-handsfree367.workers.dev. Full forensic report with blocked IPs and tasks."
show less
Hacking
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.