NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://34[.]70[.]205[.]211/plugins-dist/safehtml/lang/font/ksmd
● IOC
hxxp://34[.]70[.]205[.]211/plugins-dist/safehtml/lang/font/ksmd
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Aug 8, 2026
Last seen
—
offline
malware download
reported by
anonymous
Look up on VirusTotal
Linked malware
XMRIG
CryptoMiner
CVE-2026-60004
Gitea
monero
Related Indicators
6
url
hxxp://31[.]77[.]227[.]130:6556/ok
same malware family
url
hxxp://31[.]56[.]209[.]189:6556/ok
same malware family
url
hxxp://apt-update[.]com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D
same malware family
url
hxxp://joker[.]aec944b68370194a50[.]link:6556/ok
same malware family
url
hxxps://kworker[.]eth[.]limo/ksmd
same malware family
url
hxxp://216[.]98[.]10[.]60:55555/ksmd
same malware family
Connections
5 relationships
Indicates
5
XMRIG
source
CryptoMiner
source
CVE-2026-60004
source
Gitea
source
monero
source