#SmartApeSG

2025-05-23

Detected #SmartApeSG infection chain

Compromised site
-->
losartan[.]top/lv/xfa.js (injected)
-->
losartan[.]top/lv/select.js (clickfix)
-->
medthermography[.]com/ddas.php
-->
medthermography[.]com/lebu.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)

b5f248d2bb97c66945ead9a70a20af489c37365d93d5069c9686ecad4c481e0b lebu.zip

2025-05-23

Detected #SmartApeSG infection chain

Compromised site
-->
ace-project[.]org/d.js (injected)
-->
sdnews[.]top/lv/select.js (clickfix)
-->
sdnews[.]top/lv/ddas.php
-->
windomstatetheater[.]com/rars.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)

716712efe02df4e585c73dc87687047e5b518610f22899710a56c19ac0840a9d rars.zip

2025-05-22

Detected #SmartApeSG infection chain

Compromised site
-->
simvascor[.]top/lv/xfa.js (injected)
-->
simvascor[.]top/lv/select.js (clickfix)
-->
simvascor[.]top/lv/ddas.php
-->
windomstatetheater[.]com/mits.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)

efaf621eee9f0008ceaea8e183779fd985064db70f08ea45af09cf265865f6e8 mits.zip

2025-05-21

Detected #SmartApeSG infection chain

Compromised site
-->
ace-project[.]org/j.js (injected)
-->
lang3666[.]top/lv/select.js (clickfix)
-->
lang3666[.]top/lv/ddas.php
-->
jakestrack[.]com/zsps.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)

35ab9ebd4f80da4b4f315f7e8aab038687d681f86dd9015469c7806ad6ab638a zsps.zip

2025-05-21

Detected #SmartApeSG infection chain

Compromised site
-->
avodaride[.]top/lva/xon.js (injected)
-->
avodaride[.]top/lva/select.js (clickfix)
-->
avodaride[.]top/lva/ddas.php
-->
jakestrack[.]com/fsps.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)

262d832ef1f048951c1116f8b177943a78c0ec5b2c47959971c2951aac73763c fsps.zip

2025-05-20

Detected #SmartApeSG infection chain

Compromised site
-->
islonline[.]org/d.js (injected)
-->
nackt-bilder[.]top/vv/select.js (clickfix)
-->
nackt-bilder[.]top/vv/ddas.php
-->
viralmarketingsuite[.]com/tera.zip
-->
94[.]158.245.118:443 (NetSupport, EVALUSION, NSM165348)

cb8e1a69ae560a7e77a404c2adc22424236fcfc60eeb483d2df634b95e42dc1b tera.zip

2025-05-20

Detected #SmartApeSG infection chain

Compromised site
-->
k2bsc[.]top/lvl/trumper.js (injected)
-->
k2bsc[.]top/lvl/select.js (clickfix)
-->
k2bsc[.]top/lvl/ddas.php
-->
viralmarketingsuite[.]com/mimi.zip
-->
94[.]158.245.118:443 (NetSupport, EVALUSION, NSM165348)

4944296af2abff37e54d5e9c2ce4bfdd8247573ff69cff3664f4cd7ce7489531 mimi.zip

2025-05-19

Detected #SmartApeSG infection chain

Compromised site
-->
islonline[.]org/j.js (injected)
-->
snapcans[.]top/vv/select.js (clickfix)
-->
snapcans[.]top/vv/ddas.php
-->
upgradegc[.]com/rsrs.zip
-->
94[.]158.245.118:443 (NetSupport, EVALUSION, NSM165348)

cf01fde2ac2b232eb4add8d9e4e36c4150d9af46ebac925490ffe9f2e8a85fc1 rsrs.zip

2025-05-15

Detected #SmartApeSG infection chain

Compromised site
-->
ace-project[.]org/j.js (injected)
-->
yxta[.]top/src/select.js (clickfix)
-->
yxta[.]top/src/his.php
-->
badgervolleyball[.]org/wp-content/mios.zip
-->
94[.]158.245.118:443 (NetSupport, EVALUSION, NSM165348)

985088b8773aa9fd225cbc87af6e7e60eadf73ab9d7a77795fa84d6a15578678 mios.zip

2025-05-15

Detected #SmartApeSG infection chain

Compromised site
-->
regopramide[.]top/lav/xf_addon.js (injected)
-->
regopramide[.]top/lav/select.js (clickfix)
-->
regopramide[.]top/lav/lll.php
-->
badgervolleyball[.]org/fsos.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

891a136bfd390338164c8f5d311cdb6b8a3738ce818d551ea1ab650d6775e2d6 fsos.zip

2025-05-14

Detected #SmartApeSG infection chain

Compromised site
-->
islonline[.]org/j.js (injected)
-->
fmovies123[.]top/fix/select.js (clickfix)
-->
fmovies123[.]top/fix/his.php
-->
probuildgroupusa[.]com/xsxs.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

528b6504da4ef17107e1dbde534ab84827612e4d1d2829da4d5dedb986241599 xsxs.zip

2025-05-14

Detected #SmartApeSG infection chain

Compromised site
-->
pravaix[.]top/lv/xf_addon.js (injected)
-->
pravaix[.]top/lv/select.js (clickfix)
-->
pravaix[.]top/lv/lll.php
-->
probuildgroupusa[.]com/fsps.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

9ede708fe1ad0e699ae91bcf72c76751e01a3d8c11cc0e241b4fff296416c3a3 fsps.zip

2025-05-13

Detected #SmartApeSG infection chain

Compromised site
-->
smart-american[.]com/j.js (injected)
-->
lx7v9[.]top/fs/select.js (clickfix)
-->
lx7v9[.]top/fs/lll.php
-->
daviddarle[.]fr/wp-content/leks.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

82fcf1eb79c6d81dfffc31899d3102e6cbda17936f8c43661091673040bca2f9 leks.zip

2025-05-13

Detected #SmartApeSG infection chain

Compromised site
-->
soap2dayfree[.]top/lv/xf_addon.js (injected)
-->
soap2dayfree[.]top/lv/select.js (clickfix)
-->
soap2dayfree[.]top/lv/lll.php
-->
daviddarle[.]fr/wp-content/bule.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

7adaddf792baa80b5558d4c6144981ea9b0e63cc542c635bdf96e6ea265bc338 bule.zip

2025-05-12

Detected #SmartApeSG infection chain

Compromised site
-->
linhua97[.]top/jsen/core-compiled.js (injected)
-->
linhua97[.]top/jsen/select.js (clickfix)
-->
linhua97[.]top/jsen/ddd.php
-->
totalsolucao[.]com/wp-content/rsks.zip
-->
94[.]158.245.115:443 (NetSupport, EVALUSION, NSM165348)

1258ae02459a4654177edd43b78507b684c456c370710054d92c79df71b9e279 rsks.zip

2025-05-12

Detected #SmartApeSG infection chain

Compromised site
-->
islonline[.]org/d.js (injected)
-->
chinapark[.]top/fs/select.js (clickfix)
-->
chinapark[.]top/fs/lll.php
-->
totalsolucao[.]com/fsco.zip
-->
94[.]158.245.104:443 (NetSupport, EVALUSION, NSM165348)

db64a99b6c545b8aa1dc883fda8968faeeabcac3f9ca429c66be493cc596efe7 fsco.zip

2025-05-09

Detected #SmartApeSG infection chain

Compromised site
-->
my-privatebanker[.]top/jse/minjs.js (injected)
-->
my-privatebanker[.]top/jse/select.js (clickfix)
-->
my-privatebanker[.]top/jse/xxx.php
-->
jaagnet[.]com/rsrs.zip
-->
94[.]158.245.104:443 (NetSupport, EVALUSION, NSM165348)

c12dd8ab9291f238766ab961d9424205d03e66d91f49fdc0835b0412d174688f rsrs.zip

2025-05-08

Detected #SmartApeSG infection chain

Compromised site
-->
motocyclenews[.]top/jse/minjs.js (injected)
-->
motocyclenews[.]top/jse/select.js (clickfix)
-->
motocyclenews[.]top/jse/lll.php
-->
territoirespaysagistes[.]com/buts.zip
-->
94[.]158.245.104:443 (NetSupport, EVALUSION, NSM165348)

6b93b7372941a09f1ea69f8b71c5c4e211ea0f8a24061e702002ca84457bcddd buts.zip

2025-05-07

Detected #SmartApeSG infection chain

Compromised site
-->
jerseysus[.]top/jse/minjs.js (injected)
-->
jerseysus[.]top/jse/select.js (clickfix)
-->
jerseysus[.]top/jse/lll.php
-->
scf[.]com/cole.zip
-->
94[.]158.245.104:443 (NetSupport, EVALUSION, NSM165348)

6af533152c10415f2f96d39469c3f7778db649bc7b55e6c4798f0e8e95a3e1c9 cole.zip

2025-05-07

Detected #SmartApeSG infection chain

Compromised site
-->
islonline[.]org/d.js (injected)
-->
tiffanyearringforwomen[.]top/ifh/select.js (clickfix)
-->
tiffanyearringforwomen[.]top/ifh/lll.php
-->
lgsdesign.co[.]uk/testes.zip
-->
94[.]158.245.56:443 (NetSupport, EVALUSION, NSM165348)

1db3e5c9f1db1616f80271659ffb6b549f8beb45e5d69ca3fce4cf7e2635360a testes.zip

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst