# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/) # See the file 'LICENSE' for copying permission # Aliases: moreeggs, terraloader # Reference: https://www.proofpoint.com/us/threat-insight/post/fake-jobs-campaigns-delivering-moreeggs-backdoor-fake-job-offers interrafcu.com usstaffing.services mail.rediffmail.kz onlinemail.kz api.cloudservers.kz secure.cloudserv.ink tonsandmillions.com contactlistsagregator.com # Reference: https://twitter.com/VK_Intel/status/1119082329324965893 report.monicabellucci.kz # Reference: https://twitter.com/James_inthe_box/status/1204125950033575937 # Reference: https://app.any.run/tasks/48907a8c-bc47-4552-a705-334e93d0edca/ anuffrost.com dns.hahdyman.com # Reference: https://twitter.com/VK_Intel/status/1211758023376592896 blog.jasonlees.com # Reference: https://twitter.com/VK_Intel/status/1286747453849468929 # Reference: https://www.virustotal.com/gui/file/38f3a52e1ebd93db75f0fb6ce6172565cc0f27f0f86f32f470fa7a9c8de9f094/detection maps.doaglas.com