{"success":true,"data":{"threats":[{"id":"dd2123ce-743f-47b0-b9b9-e1eef080b1f5","slug":"threatfox-1957899","externalId":"threatfox-1957899","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://kl[.]3toto[.]com","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","2f3c6fb2d82ed66e2e45208cd1c7edd1","c2","loader","stealer","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957899/","type":"report","title":"ThreatFox IOC 1957899"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T20:02:22.000Z","addedAt":"2026-10-08T20:48:02.508Z","updatedAt":"2026-10-08T20:48:02.508Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"c634661f-2746-42d9-957c-d4780893ae1d","slug":"threatfox-1957584","externalId":"threatfox-1957584","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar domain: ss[.]3toto[.]com","description":"Domain that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:domain","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957584/","type":"report","title":"ThreatFox IOC 1957584"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T16:35:48.000Z","addedAt":"2026-10-08T16:41:57.809Z","updatedAt":"2026-10-08T20:48:04.909Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"597880c9-2aee-4ea0-b221-a19b707dfafd","slug":"threatfox-1957585","externalId":"threatfox-1957585","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://ss[.]3toto[.]com/","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957585/","type":"report","title":"ThreatFox IOC 1957585"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T16:35:48.000Z","addedAt":"2026-10-08T16:41:57.815Z","updatedAt":"2026-10-08T20:48:04.917Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"fec59e1e-6641-411e-93c1-d66854eb7a42","slug":"threatfox-1957579","externalId":"threatfox-1957579","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://ss[.]333vip[.]org","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:75","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957579/","type":"report","title":"ThreatFox IOC 1957579"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T16:22:13.000Z","addedAt":"2026-10-08T16:41:57.855Z","updatedAt":"2026-10-08T20:48:04.959Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"6b1e8690-97cd-4d65-84ee-e28e1d04fb39","slug":"threatfox-1957576","externalId":"threatfox-1957576","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar domain: ss[.]333vip[.]org","description":"Domain that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:domain","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957576/","type":"report","title":"ThreatFox IOC 1957576"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T15:50:48.000Z","addedAt":"2026-10-08T16:41:57.862Z","updatedAt":"2026-10-08T20:48:04.966Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"b8d4e207-82c5-4d09-99cc-6d0059407cdc","slug":"threatfox-1957577","externalId":"threatfox-1957577","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://ss[.]333vip[.]org/","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957577/","type":"report","title":"ThreatFox IOC 1957577"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T15:50:48.000Z","addedAt":"2026-10-08T16:41:57.869Z","updatedAt":"2026-10-08T20:48:04.974Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"3cd09cee-10d3-4e42-b458-579203deb5f9","slug":"threatfox-1957334","externalId":"threatfox-1957334","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://172[.]235[.]182[.]6","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%. Last seen 2026-10-08 20:44:35 UTC.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","0086075e3f7c97c9ab04a1a2cd48e78b","c2","loader","stealer","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957334/","type":"report","title":"ThreatFox IOC 1957334"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T14:06:14.000Z","addedAt":"2026-10-08T14:41:58.591Z","updatedAt":"2026-10-08T20:48:06.745Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"00ef05e5-0a0a-4ccd-a7dd-a43a133b0945","slug":"threatfox-1957335","externalId":"threatfox-1957335","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://172[.]105[.]64[.]167","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%. Last seen 2026-10-08 20:44:26 UTC.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","9907f3712d269b106ae1de2f415a7914","c2","loader","stealer","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957335/","type":"report","title":"ThreatFox IOC 1957335"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T14:06:14.000Z","addedAt":"2026-10-08T14:41:58.598Z","updatedAt":"2026-10-08T20:48:06.753Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"d80ad41b-47a4-4df9-b447-63ab383a3c76","slug":"threatfox-1957310","externalId":"threatfox-1957310","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar sha256_hash: 63d5297ab9ccc40d45877940e18d5403e26914f1d71b59fb973f667d9095df54","description":"SHA256 hash of a malware sample (payload) indicator associated with Vidar. Indicator that identifies a malware sample (payload) Reporter confidence 90%. Last seen 2026-10-08 14:33:32 UTC.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:sha256-hash","threat:payload","malware:win-vidar","confidence:90","d52f85","dropped-by-amadey","exe","upx","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957310/","type":"report","title":"ThreatFox IOC 1957310"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T13:40:26.000Z","addedAt":"2026-10-08T13:41:57.600Z","updatedAt":"2026-10-08T20:48:06.971Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"80f0a008-dfcc-4fb6-a18f-91a95e32be11","slug":"threatfox-1957266","externalId":"threatfox-1957266","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://tb[.]3toto[.]com","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:75","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957266/","type":"report","title":"ThreatFox IOC 1957266"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T13:00:24.000Z","addedAt":"2026-10-08T13:41:57.908Z","updatedAt":"2026-10-08T20:48:07.286Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"664ffc2e-8b5d-4356-bdda-2bcf07075721","slug":"threatfox-1957265","externalId":"threatfox-1957265","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://tb[.]333vip[.]org","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:75","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957265/","type":"report","title":"ThreatFox IOC 1957265"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T13:00:24.000Z","addedAt":"2026-10-08T13:41:57.902Z","updatedAt":"2026-10-08T20:48:07.278Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"4496d3b2-3c2a-4ff1-b54a-610600be7f36","slug":"threatfox-1957086","externalId":"threatfox-1957086","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://tb[.]333vip[.]org/","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957086/","type":"report","title":"ThreatFox IOC 1957086"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T11:55:49.000Z","addedAt":"2026-10-08T12:41:58.593Z","updatedAt":"2026-10-08T20:48:08.590Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"d7751140-e215-4c71-88fe-3aa031873224","slug":"threatfox-1957084","externalId":"threatfox-1957084","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar url: hxxps://tb[.]3toto[.]com/","description":"URL that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957084/","type":"report","title":"ThreatFox IOC 1957084"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T11:55:48.000Z","addedAt":"2026-10-08T12:41:58.608Z","updatedAt":"2026-10-08T20:48:08.607Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"07ee62d8-fc34-4fa0-878a-498cae6d02d4","slug":"threatfox-1957083","externalId":"threatfox-1957083","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar domain: tb[.]3toto[.]com","description":"Domain that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:domain","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957083/","type":"report","title":"ThreatFox IOC 1957083"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T11:55:48.000Z","addedAt":"2026-10-08T12:41:58.600Z","updatedAt":"2026-10-08T20:48:08.598Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"9d42a9a5-b0ea-4c43-a761-86484f4d8852","slug":"threatfox-1957085","externalId":"threatfox-1957085","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Vidar domain: tb[.]333vip[.]org","description":"Domain that is used for botnet Command&control (C&C) indicator associated with Vidar. Indicator that identifies a botnet command&control server (C&C) Reporter confidence 100%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:domain","threat:botnet-cc","malware:win-vidar","confidence:100","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957085/","type":"report","title":"ThreatFox IOC 1957085"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T11:55:48.000Z","addedAt":"2026-10-08T12:41:58.618Z","updatedAt":"2026-10-08T20:48:08.614Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"12b78068-e599-4d51-8504-3b6dbe5b8768","slug":"urlhaus-3945930","externalId":"urlhaus-3945930","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on raw[.]githubusercontent[.]com","description":"URLhaus recorded hxxps://raw[.]githubusercontent[.]com/shaerrlys/FiveM-Spoofer/HEAD/CFXBypass[.]exe as malware download. The URL is currently online. Reported by shmulc.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","cheatsheet","exe","github","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3945930/","type":"report","title":"URLhaus entry 3945930"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T05:52:56.000Z","addedAt":"2026-10-08T06:42:07.446Z","updatedAt":"2026-10-08T20:48:16.383Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"e7b1f0dc-d268-40ac-8f89-a36a5a3104f4","slug":"urlhaus-3945853","externalId":"urlhaus-3945853","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on raw[.]githubusercontent[.]com","description":"URLhaus recorded hxxps://raw[.]githubusercontent[.]com/colleshake/FiveM-Spoofer/HEAD/CFXBypass[.]exe as malware download. The URL is currently online. Reported by shmulc.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","cheatsheet","exe","github","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3945853/","type":"report","title":"URLhaus entry 3945853"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T05:52:15.000Z","addedAt":"2026-10-08T06:42:07.971Z","updatedAt":"2026-10-08T20:48:16.941Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"4a4e7edf-61e1-4c65-a12b-33dd3241cf1f","slug":"urlhaus-3945813","externalId":"urlhaus-3945813","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on raw[.]githubusercontent[.]com","description":"URLhaus recorded hxxps://raw[.]githubusercontent[.]com/mnesshv1/Pubg-DESYNC-Menu/HEAD/Loader[.]exe as malware download. The URL is currently online. Reported by shmulc.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","cheatsheet","exe","github","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3945813/","type":"report","title":"URLhaus entry 3945813"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T05:51:39.000Z","addedAt":"2026-10-08T06:42:08.241Z","updatedAt":"2026-10-08T20:48:17.231Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"7bdcc5be-f9b5-43ca-96bc-0762685aed8f","slug":"urlhaus-3945628","externalId":"urlhaus-3945628","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on raw[.]githubusercontent[.]com","description":"URLhaus recorded hxxps://raw[.]githubusercontent[.]com/arcellys/FiveM-Spoofer/HEAD/CFXBypass[.]exe as malware download. The URL is currently online. Reported by shmulc.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","cheatsheet","exe","github","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3945628/","type":"report","title":"URLhaus entry 3945628"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T05:47:27.000Z","addedAt":"2026-10-08T06:42:09.509Z","updatedAt":"2026-10-08T18:42:13.506Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"f872730e-c5cd-4cff-aeee-3e0855f219bd","slug":"urlhaus-3945555","externalId":"urlhaus-3945555","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on raw[.]githubusercontent[.]com","description":"URLhaus recorded hxxps://raw[.]githubusercontent[.]com/scelmm1/Pubg-DESYNC-Menu/HEAD/Loader[.]exe as malware download. The URL is currently online. Reported by shmulc.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","cheatsheet","exe","github","vidar"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3945555/","type":"report","title":"URLhaus entry 3945555"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T05:46:27.000Z","addedAt":"2026-10-08T06:42:10.007Z","updatedAt":"2026-10-08T17:42:12.354Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]}],"pagination":{"page":1,"limit":20,"total":1682,"totalPages":85,"hasNext":true,"hasPrev":false}},"meta":{"apiVersion":"v1","requestedAt":"2026-10-08T23:58:03.898Z","durationMs":31,"filters":{"search":null,"severity":[],"type":[],"country":[],"tag":["vidar"],"cwe":[],"vendor":null,"product":null,"cve":null,"source":[],"days":null,"publishedAfter":null,"publishedBefore":null,"minCvss":null,"maxCvss":null,"minEpss":null,"knownExploited":null,"hasPatch":null,"hasNucleiTemplate":null},"sort":"newest","unknownParams":[],"warnings":[]}}