[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwtil84t_N2DIXmAC3s7qJxO7DHJucyHm2QAHR8V0cWY":3},{"article":4,"iocs":34,"watch_terms":46},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"62b5249e-1ab1-4630-aea3-313ac5a11550","@TMobile 2 related malware source urls:\nhttps:\u002F\u002Ftmobile-support[.]com\u002Ffiles\u002FT-Mobile-Security-Pat...","tmobile-2-related-malware-source-urls-https-tmobile-support-com-files-t-mobile-s","@TMobile 2 related malware source urls:\nhttps:\u002F\u002Ftmobile-support[.]com\u002Ffiles\u002FT-Mobile-Security-Patch.zip\nhttps:\u002F\u002Ftmobile-support[.]com\u002Ffiles\u002FTM_SecPatch_v2.1.4.exe\nThe files coming from there have already been uploaded to Baazar by @smica83 as usual: https:\u002F\u002Ft.co\u002F2aBUDxyCMA","Researchers identified malicious URLs spoofing T-Mobile's support domain distributing trojanized files disguised as security patches and updates. The malware samples have been uploaded to analysis platforms, indicating an active campaign leveraging brand impersonation and social engineering to distribute malicious payloads to users seeking legitimate security updates.","T-Mobile impersonation domains distribute malware disguised as security patches.",null,"https:\u002F\u002Fx.com\u002Fmalwrhunterteam\u002Fstatus\u002F2036392137873375384","2026-03-24T10:38:14+00:00","2026-03-24T11:00:15.344096+00:00",7,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":11,"name":19,"slug":20},"Malware","malware",[22,27,29],{"category":23},{"id":24,"icon":11,"name":25,"slug":26},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":28},{"id":17,"icon":11,"name":19,"slug":20},{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[35,39,43],{"type":36,"value":37,"context":38},"domain","tmobile-support.com","Malicious domain impersonating legitimate T-Mobile support, distributing trojanized security patches",{"type":40,"value":41,"context":42},"url","https:\u002F\u002Ftmobile-support.com\u002Ffiles\u002FT-Mobile-Security-Patch.zip","Malware distribution URL disguised as T-Mobile security patch archive",{"type":40,"value":44,"context":45},"https:\u002F\u002Ftmobile-support.com\u002Ffiles\u002FTM_SecPatch_v2.1.4.exe","Malware distribution URL disguised as T-Mobile security patch executable",[]]