NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxps://www[.]mediocasavolponi[.]com/wp-content/plugins/linux[.]bin
● IOC
hxxps://www[.]mediocasavolponi[.]com/wp-content/plugins/linux[.]bin
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Aug 27, 2026
Last seen
—
offline
malware download
reported by
d351d3r
Look up on VirusTotal
Linked malware
CoinMiner
XMRIG
CVE-2026-60004
Gitea
monero
cryptomining
Linuxsys
Related Indicators
6
url
hxxp://91[.]92[.]242[.]236/files-129312398/files/file_3fe5ed2d30d53a73[.]exe
same malware family
url
hxxp://178[.]16[.]54[.]109/rvn[.]exe
same malware family
url
hxxps://www[.]dropbox[.]com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner[.]exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1
same malware family
url
hxxp://joker[.]aec944b68370194a50[.]link:6556/k
same malware family
url
hxxp://31[.]77[.]227[.]130:6556/k
same malware family
url
hxxp://31[.]56[.]209[.]189:6556/k
same malware family
Connections
7 relationships
Indicates
7
CoinMiner
source
XMRIG
source
CVE-2026-60004
source
Gitea
source
monero
source
cryptomining
source
Linuxsys
source