NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxps://genovaw[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336
● IOC

hxxps://genovaw[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336

View graph Watch Export
Type
URL
Sources
ThreatFoxURLhaus
First seen
Sep 18, 2026
Last seen
—
offlinepayload deliveryreported by c4ffeine
Look up on VirusTotal
Linked malware
stealerAMOSmacosClickFixzshMacSyncUnstoppableDomainssafeguard-buildtoken-001e07c9zsh-stage1
Related Indicators
6
urlhxxps://www[.]dropbox[.]com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod[.]exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1same malware familyurlhxxps://www[.]dropbox[.]com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup[.]exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1same malware familyurlhxxp://192[.]162[.]199[.]249/8jot5vdohds0imt4same malware familyurlhxxp://192[.]162[.]199[.]249/1vo6lm4y50k3ww0fsame malware familyurlhxxp://192[.]162[.]199[.]249/zeb8cgwmkkpvu7pcsame malware familyurlhxxp://192[.]162[.]199[.]249/1edjop4tlj2dsame malware family
Connections
10 relationships
stealer
source
AMOS
source
macos
source
ClickFix
source
zsh
source
MacSync
source
UnstoppableDomains
source
safeguard-build
source
token-001e07c9
source
zsh-stage1
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon