Dee@ViriBackJul 4#malware Some C2 Panel and opendir on same ip: s://panel.edge-msdn[.]com/login 66.42.114[.]65:808019697.9K
Dee@ViriBackMay 24A few C2 Panels I dont know what they are... 176.174.36[.]147/ s://167.235.228[.]178/auth/login s://45.80.188[.]4:8081/login 31.57.201[.]43:5000/login47679.1K
Dee@ViriBackApr 27#GoSteal #Malware ? TLS Cert says "CN=go-steal" deadrop url account says "gosteal_test_2026" See: app.any.run/tasks/d04151b4…James@James_inthe_boxApr 27#unknown panel associated with: bf777e4dee6918d2373ba83433b4a7530d6e69465a1b6107ef4fd43f4ea60ec4 cc @ViriBack14142.2K
James@James_inthe_boxApr 27#unknown panel associated with: bf777e4dee6918d2373ba83433b4a7530d6e69465a1b6107ef4fd43f4ea60ec4 cc @ViriBack