# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: macspy

# Reference: https://resources.infosecinstitute.com/malware-dark-web/

macspy423ho54vap.onion

# Reference: https://x.com/suyog41/status/1970063333228200230
# Reference: https://www.virustotal.com/gui/file/a7abdee756da5492f2fa35682efe1c314697cca48358c2c3e107426a3666dbec/detection

08jm.ru
b-395.ru
c-080.ru
armlessmatrix.com
ditchibuprofen.com
msinfosupport.com
h-214.ru
k-342.ru
m-754.ru
n-585.ru
q-083.ru
s-537.ru
s-819.ru
aq3.b-395.ru
b2.s-819.ru
c5.c-080.ru
c7.n-585.ru
d.h-214.ru
in.armlessmatrix.com
in.ditchibuprofen.com
k.m-754.ru
k3x.s-537.ru
m8.b-395.ru
qk2.08jm.ru
qz9.m-754.ru
r.08jm.ru
r.s-537.ru
rk8.q-083.ru
tq1.s-819.ru
u5.08jm.ru
v2.m-754.ru
v5.k-342.ru
w4.h-214.ru
wq9.n-585.ru
x.s-819.ru
z.b-395.ru

# Reference: https://x.com/suyog41/status/1971116308256391269
# Reference: https://www.virustotal.com/gui/file/800b450cf9ca376bc24be2e2a7f4accef407cf042e104e6358d88e6d562db850/detection
# BANNER_0_HASH-HOST=2a504073b2190b0a497965d049cc7b84

msdomgate.top
msfullshop.space
msinfosupport.com
mssysinfo.org
