>samit_hota
Back to IOCs
G10208 indicators

FAKEUPDATES — Indicators of Compromise

Samit Hota·
#ioc#fakeupdates

Overview

Indicators of compromise associated with FAKEUPDATES. 8 indicators listed below, linked to the G1020 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domainup-to-date.paquetesparaorlando.comJuly 18, 2026100%
urlhttps://content-website-analytics.com/script.jsJuly 17, 202675%
domainimg-eu.veranofund.comJuly 16, 2026100%
domaincampaigns-fb.piousprojects.comJuly 16, 2026100%
domainfree-api.travelaccex.comJuly 15, 2026100%
domainimages.miamionly.comJuly 14, 2026100%
domainhigh-priority.futurainternationalrealty.comJuly 13, 2026100%
domainstake.libertariancounterpoint.comJuly 13, 2026100%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call