NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxps://69[.]30[.]251[.]156/library/Payment/Adapter/PAYEER/ksmd
● IOC

hxxps://69[.]30[.]251[.]156/library/Payment/Adapter/PAYEER/ksmd

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Aug 8, 2026
Last seen
—
offlinemalware downloadreported by anonymous
Look up on VirusTotal
Linked malware
XMRIGCryptoMinerCVE-2026-60004Giteamonero
Related Indicators
6
urlhxxp://31[.]77[.]227[.]130:6556/oksame malware familyurlhxxp://31[.]56[.]209[.]189:6556/oksame malware familyurlhxxp://apt-update[.]com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7Dsame malware familyurlhxxp://joker[.]aec944b68370194a50[.]link:6556/oksame malware familyurlhxxp://34[.]70[.]205[.]211/plugins-dist/safehtml/lang/font/ksmdsame malware familyurlhxxps://kworker[.]eth[.]limo/ksmdsame malware family
Connections
5 relationships
XMRIG
source
CryptoMiner
source
CVE-2026-60004
source
Gitea
source
monero
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon