Emotet malware distribution @13.94.135.183 [compromise website]

The host at this IP address is hosting a website that have been compromised by threat actors to distribute Emotet (aka Heodo) malware. The following URL is hosting a webshell that is being accessed by the threat actors programmatically to place malware on the website:

URL: http://o7therapy.com/wp-content/plugins/all-in-one-wp-migration/storage/JST10x.php
Host: o7therapy.com
IP address: 13.94.135.183
Hostname: n/a

Добавить комментарий

Ваш адрес email не будет опубликован.