Newly reported: last 24 hours

Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC

Indicators first published by a research team in the 24 hours before this release: 0 confident, 29 blocking, 1 hunting only. Confident first, then Blocking, then Hunting.

Indicator (defanged)	Type	Reported as	Block scope	First reported	List	Sources
`0auth-chromium[.]com`	Domain	Command and control	Domain and subdomains	2026-10-12	Blocking	Elastic Security Labs [1]
`apexaccs[.]org`	Domain	Malware download	Domain and subdomains	2026-10-12	Blocking	Elastic Security Labs [1]
`arena[.]apexaccs[.]org`	Domain	Listed by researchers	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`arena[.]apexfdn[.]xyz`	Domain	Listed by researchers	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`arenapex[.]cloud`	Domain	Malware download	Domain and subdomains	2026-10-12	Blocking	Elastic Security Labs [1]
`ccmihr[.]com`	Domain	Malware download	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`cloudmain365duo[.]top`	Domain	Malware download	Domain and subdomains	2026-10-12	Blocking	Elastic Security Labs [1]
`ehegisnightmare[.]icu`	Domain	Malware download	Domain and subdomains	2026-10-12	Blocking	Elastic Security Labs [1]
`main[.]router-apex[.]com`	Domain	Malware download	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`token[.]apexaccs[.]org`	Domain	Listed by researchers	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`update[.]apex-arena-router[.]com`	Domain	Listed by researchers	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`verify[.]apexfdn[.]xyz`	Domain	Malware download	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`vrf[.]apexaccs[.]org`	Domain	Malware download	That exact host	2026-10-12	Blocking	Elastic Security Labs [1]
`127ae4cad80b6605157ca2a1feada8a235e16aacc5d2119337a98115a4e13274`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`20f0a401676292d4ae34932e61f34afa97bcfc47ee517cda2afeb7222264a193`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`42a760b15fea7c9af718ee45386c1c3ea1bec9e30c95d16c287bcc8b2efdc72e`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`5ee7145061f05779f7f6f9b72e216713d17d53e183a92f408bfbbc44f2bfb95d`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`68f5a00eafa8ecebf5d93328e0fec23b24d6f91808c8384db002946a13656c71`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`985829083f3937df6c82419216f7697afae0caac8efca6257a756066fe2c0abb`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`a50cdb508d13884630945a98eea0615b866d938eb0a16c5d958e6c8c181a6df8`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`ed5cb4af1d2cb067b8d23783ebf05d70278728462ba4f1bf29da0a3a41efc35e`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`ee8cd9aba420f1b26b5d43e5bcdd6025a277b4946bb5daf76ab45c0e5f7ecd0b`	SHA-256 hash	Malware file	That file	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://ccmihr[.]com/macos/jquery[.]js`	URL	Command and control	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://ehegisnightmare[.]icu/build/J2BkQFArlBUXf4MF/install[.]exe`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://ehegisnightmare[.]icu/build/nTOugj-fWWMurYHg/bludness[.]exe`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://main[.]router-apex[.]com/updater[.]sh`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://update[.]apex-arena-router[.]com/loader[.]sh`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://verify[.]apexfdn[.]xyz/macos/installer/terminal/interactive/bash`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://vrf[.]apexaccs[.]org/api/v1/vrf`	URL	Malware download	That exact URL	2026-10-12	Blocking	Elastic Security Labs [1]
`hxxps://www[.]dropbox[.]com/scl/fi/tbxu5vgr9l1vuw3s7rw7v/VisualStudioSetup[.]exe?rlkey=o6dpwfynneuxeyok7g5trtv96&st=nj5jxsoe&dl=1`	URL	Malware download	Search only	2026-10-12	Hunting	Elastic Security Labs [1]