Country
Luxembourg
- First Reported
- Mar 27, 2026
- Latest Reported
- Mar 27, 2026
Reported Context (1)
- A persistent systemd service polls checkmarx[.]zone every 50 minutes for new payloads, feeding two independent C2 frameworks: AdaptixC2 (83.142.209[.]11, Luxembourg) and Havoc (45.148.10[.]212, Netherlands). TeamPCP’s LiteLLM Supply-Chain Attack Targets Credentials and Kubernetes Clusters
Threat Actors (1)
MITRE ATT&CK (26)
Vendors (5)
Products (8)
Tools (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.