[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feBqOQuFw8YIZCVv4XryDmVTsEhqT4yi9dVmEaJlTR4s":3},{"article":4,"iocs":29,"watch_terms":56},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"acef4393-e1cf-40aa-b89a-5855e4ef4b1a","@BlinkzSec @500mk500 @JAMESWT_WT @banthisguy9349 Thanks for sharing! Indeed Tofsee ⤵️\n\nStage 1 C2...","blinkzsec-500mk500-jameswt-wt-banthisguy9349-thanks-for-sharing-indeed-tofsee-st-c9fd9c","@BlinkzSec @500mk500 @JAMESWT_WT @banthisguy9349 Thanks for sharing! Indeed Tofsee ⤵️\n\nStage 1 C2:\n94.232.41.96:443 (quag .cn)\n\nStage 2 C2s:\n130.12.180.119:428\n130.12.182.175:428\n204.76.203.162:428\n31.57.216.27:428\n31.57.216.28:428\n46.151.182.19:428\n46.151.182.245:428\n64.89.161.178:484\n\nMore IOCs:\nhttps:\u002F\u002Ft.co\u002FMa44VCUUlr","Security researchers shared command-and-control (C2) infrastructure details for Tofsee, a known botnet malware. The disclosure includes a stage 1 C2 server and multiple stage 2 C2 addresses across various ports, along with a reference to additional IOCs.","Tofsee botnet command-and-control infrastructure IOCs disclosed.",null,"https:\u002F\u002Fx.com\u002Fabuse_ch\u002Fstatus\u002F2044133378560029111","2026-04-14T19:19:10+00:00","2026-04-14T20:00:10.930715+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":11,"name":19,"slug":20},"Malware","malware",[22,24],{"category":23},{"id":17,"icon":11,"name":19,"slug":20},{"category":25},{"id":26,"icon":11,"name":27,"slug":28},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[30,34,38,41,43,45,47,49,51,53],{"type":31,"value":32,"context":33},"ip","94.232.41.96","Tofsee stage 1 C2 server on port 443",{"type":35,"value":36,"context":37},"domain","quag.cn","Tofsee stage 1 C2 domain",{"type":31,"value":39,"context":40},"130.12.180.119","Tofsee stage 2 C2 on port 428",{"type":31,"value":42,"context":40},"130.12.182.175",{"type":31,"value":44,"context":40},"204.76.203.162",{"type":31,"value":46,"context":40},"31.57.216.27",{"type":31,"value":48,"context":40},"31.57.216.28",{"type":31,"value":50,"context":40},"46.151.182.19",{"type":31,"value":52,"context":40},"46.151.182.245",{"type":31,"value":54,"context":55},"64.89.161.178","Tofsee stage 2 C2 on port 484",[]]