domain
oob.moika.tech
discovered 2026-05-28
Shared C2 host across all three waves. Hosts /report exfiltration endpoint and /payload/{platform} second-stage scripts. Wave 3 platform strings: linux-x64, darwin-arm64, win.
Campaigns
Linked packages
- npm @cloudplatform-single-spa/billingcommunicates-with
- npm @car-loans/mobile-car-loans-applicationcommunicates-with
- npm @mlspace/shared-storagecommunicates-with
- npm @fb-deposit/form-depositcommunicates-with
- npm @debit-ib/mobile-debit-ib-additional-card-formcommunicates-with
- npm @t-in-one/add_applicationcommunicates-with
- npm @emcd-vue/authcommunicates-with
- npm @emcd-vue/loanscommunicates-with
