Campaigns / Malware / Family

SmartApeSG

0New IOCs · 24h
26New IOCs · 7 days
30Indicators tracked
1Independent feeds
2026-10-09 18:29Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • URL20
  • Domain10
  • Malware29
  • C21

Where its infrastructure is hosted

No location data.

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-09 18:29URLhxxps://ai[.]myrtlelexicon[.]co/auth/dashboard-cachePayload delivery—
2026-10-09 18:29Domainai[.]myrtlelexicon[.]coPayload delivery—
2026-10-09 18:29URLhxxps://ai[.]myrtlelexicon[.]co/auth/permission-render.jsPayload delivery—
2026-10-09 13:05URLhxxps://pro[.]jasperwater[.]info/auth/dashboard-cachePayload delivery—
2026-10-09 13:05Domainpro[.]jasperwater[.]infoPayload delivery—
2026-10-09 13:05URLhxxps://pro[.]jasperwater[.]info/auth/permission-render.jsPayload delivery—
2026-10-08 14:06URLhxxps://lavendertome[.]co/trace/handler-serverPayload delivery—
2026-10-08 14:06Domainlavendertome[.]coPayload delivery—
2026-10-08 14:06URLhxxps://lavendertome[.]co/trace/acl-hook.jsPayload delivery—
2026-10-07 17:24URLhxxps://carnelianquay[.]info/trace/router-sandboxPayload delivery—
2026-10-07 17:24URLhxxps://carnelianquay[.]info/trace/endpoint-view.jsPayload delivery—
2026-10-07 16:54Domaincarnelianquay[.]infoBotnet C2—
2026-10-07 16:54URLhxxps://carnelianquay[.]info/trace/proxy-client.jsPayload delivery—
2026-10-07 13:38URLhxxps://thymesonnet[.]co/trace/router-sandboxPayload delivery—
2026-10-07 13:38URLhxxps://thymesonnet[.]co/trace/proxy-client.jsPayload delivery—
2026-10-07 13:38Domainthymesonnet[.]coPayload delivery—
2026-10-07 13:38URLhxxps://thymesonnet[.]co/trace/endpoint-view.jsPayload delivery—
2026-10-07 04:37URLhxxps://rosemaryballad[.]co/proxy/public-hookPayload delivery—
2026-10-07 04:37Domainrosemaryballad[.]coPayload delivery—
2026-10-07 04:37URLhxxps://rosemaryballad[.]co/proxy/alias-client.jsPayload delivery—
2026-10-06 14:02URLhxxps://sunstonejetty[.]info/proxy/metrics-parser.jsPayload delivery—
2026-10-06 13:23URLhxxps://sunstonejetty[.]info/proxy/public-hookPayload delivery—
2026-10-06 13:23URLhxxps://sunstonejetty[.]info/proxy/alias-client.jsPayload delivery—
2026-10-06 12:38Domainsunstonejetty[.]infoPayload delivery—
2026-10-05 16:41URLhxxps://chamomilecanto[.]co/version/health-worker.jsPayload delivery—
2026-10-05 13:22Domainchamomilecanto[.]coPayload delivery—
2026-06-13 15:05Domaindivinenarratives[.]orgPayload delivery—
2026-06-13 15:05URLhxxps://divinenarratives[.]org/d.jsPayload delivery—
2026-01-30 07:32URLhxxps://www[.]ski-snowboardvancouver[.]ca/d.jsPayload delivery—
2026-01-30 07:32Domainwww[.]ski-snowboardvancouver[.]caPayload delivery—

Defanged for safety. URL query strings removed.