← All reports

Malicious Command and Control (C2) configurations were observed in specific locations on given dates.

CybersecurityConflictApr 30, 2026score 0.272 posts · 0 replies across 2 instances
The thread reports the observation of StagedC2 configurations on specific dates, including their locations and associated IP addresses, indicating potential malicious activity.

Claims

Malicious Command and Control (C2) configurations were observed in specific locations on given dates.
Parent: CybersecurityEntity: Malicious C2 configurationsImpact: negativeDate: Apr 30, 2026 - May 5, 2026Target: Malicious C2 configurations

Source posts

@[email protected]
#StagedC2 config observed at Thu Apr 30 11:23:03 2026 UTC, located at hXXps://pastebin[.]com/raw/5XjzWw6J C2: onr7kkd1ba[.]localto[.]net:4304 (IP: 129.151.142.36)
0 boosts · 0 favs · 0 replies · Apr 30, 2026
#stagedc2
@[email protected]
#StagedC2 config observed at Tue May 5 05:41:16 2026 UTC, located at hXXps://pastebin[.]com/raw/sWbXuPjp C2: jahf7286ld[.]localto[.]net:5728 (IP: 94.156.250.190)
0 boosts · 0 favs · 0 replies · May 5, 2026
#stagedc2
@[email protected]
#StagedC2 config observed at Thu Apr 30 11:45:04 2026 UTC, located at hXXps://pastebin[.]com/raw/wK47UQyE C2: etg3ou6ljm[.]localto[.]net:5435 (IP: 129.151.142.36)
0 boosts · 0 favs · 0 replies · Apr 30, 2026
#stagedc2
@[email protected]
#StagedC2 config observed at Thu Apr 30 12:24:12 2026 UTC, located at hXXps://pastebin[.]com/raw/iAKr7D8C C2: portbuddy[.]dev:40633 (IP: 158.160.75.185)
0 boosts · 0 favs · 0 replies · Apr 30, 2026
#stagedc2
@[email protected]
#StagedC2 config observed at Thu Apr 30 12:49:02 2026 UTC, located at hXXps://pastebin[.]com/raw/PZZSCH6C C2: uadahjxaxasn-63630[.]portmap[.]host:63630 (IP: 193.161.193.99)
0 boosts · 0 favs · 0 replies · Apr 30, 2026
#stagedc2