medium
advisory
FakeUpdates Indicators of Compromise
ThreatFox reported three new FAKEUPDATES (js.fakeupdates) indicators first seen on 2026-11-04.
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 5, 13:30 UTC
- Detection
- 3 IOCs
- Source quality
- B2Roughly even chance
ThreatFox listed three new FAKEUPDATES (js.fakeupdates) indicators of compromise first seen on 2026-11-04. The indicators consist of two domains classified as botnet_cc and one URL classified as payload_delivery.
Indicators of compromise
2
domain
1
url
| Type | Value |
|---|---|
| domain | img3.centovinipolska.com |
| url | https://support.grovecityelectrician.com/ZtoCkR34YfgC+DijUe0usxWzZrNc6DKlUuozqEr4cLNc+Gf9DLZv8gG2erMb |
| domain | support.grovecityelectrician.com |