# StagedC2 config observed at Sun Aug 30 15:12:06 2026 UTC, located at hXXps://pastebin[.]com/raw/41yvKQiz C2: 176[.]12[.]97[.]181:1337
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
# StagedC2 config observed at Sun Aug 30 15:12:06 2026 UTC, located at hXXps://pastebin[.]com/raw/41yvKQiz C2: 176[.]12[.]97[.]181:1337
# StagedC2 config observed at Sun Aug 30 21:54:02 2026 UTC, located at hXXps://pastebin[.]com/raw/W50hi3gD C2: 31[.]177[.]110[.]9:443
# StagedC2 config observed at Mon Aug 31 00:49:02 2026 UTC, located at hXXps://pastebin[.]com/raw/v9V6Mb4U C2: mariocxiter[.]abrdns[.]com:4881 (IP: 41.105.130.174)
# StagedC2 config observed at Mon Aug 31 02:32:03 2026 UTC, located at hXXps://pastebin[.]com/raw/zcF3YWZ2 C2: rodrigovini-62689[.]portmap[.]host:62689 (IP: 193.161.193.99)
# StagedC2 config observed at Mon Aug 31 11:30:03 2026 UTC, located at hXXps://pastebin[.]com/raw/31ZHNvZd C2: qww915entj[.]localto[.]net:4784 (IP: 94.156.250.190)
# StagedC2 config observed at Mon Aug 31 11:55:06 2026 UTC, located at hXXps://pastebin[.]com/raw/N7xWMDmq C2: yiq2d6zz71[.]localto[.]net:7776 (IP: 94.156.250.190)
# StagedC2 config observed at Mon Aug 31 15:05:06 2026 UTC, located at hXXps://pastebin[.]com/raw/W8zidCM5 C2: jakarta-judith[.]tun[.]ply[.]gg:17798 (IP: 147.185.221.213)
# StagedC2 config observed at Mon Aug 31 15:28:07 2026 UTC, located at hXXps://pastebin[.]com/raw/7iJWvNb7 C2: 190[.]102[.]43[.]198:7771
The devastation of NSA Bahrain is a national security warning https://www. militarytimes.com/opinion/2026 /08/28/the-devastation-of-nsa-bahrain-is-a-national-security-warning/
# StagedC2 config observed at Mon Aug 31 16:27:03 2026 UTC, located at hXXps://pastebin[.]com/raw/DuH42yNR C2: gpeu9wsxtm[.]localto[.]net:4445 (IP: 147.93.153.126)
# StagedC2 config observed at Mon Aug 31 22:10:07 2026 UTC, located at hXXps://pastebin[.]com/raw/At93AFkV C2: 0[.]tcp[.]sa[.]ngrok[.]io:00000 (IP: 56.125.42.136)
# StagedC2 config observed at Mon Aug 31 22:28:02 2026 UTC, located at hXXps://pastebin[.]com/raw/5kR91Df1 C2: offn2tt-61657[.]portmap[.]host:61657 (IP: 193.161.193.99)
# StagedC2 config observed at Mon Aug 31 22:44:02 2026 UTC, located at hXXps://pastebin[.]com/raw/ejZ1pK8L C2: 3[.]tcp[.]cpolar[.]top:10655 (IP: 8.162.3.74)
# StagedC2 config observed at Tue Sep 1 00:49:02 2026 UTC, located at hXXps://pastebin[.]com/raw/kQQ6N7RQ C2: 75[.]158[.]248[.]214:8080
# StagedC2 config observed at Tue Sep 1 01:02:02 2026 UTC, located at hXXps://pastebin[.]com/raw/Nbt1k2qP C2: 163[.]245[.]215[.]235:8080
# StagedC2 config observed at Tue Sep 1 13:44:05 2026 UTC, located at hXXps://pastebin[.]com/raw/6XfYL9eU C2: 3[.]tcp[.]cpolar[.]top:10091 (IP: 8.162.3.74)
# StagedC2 config observed at Tue Sep 1 21:53:03 2026 UTC, located at hXXps://pastebin[.]com/raw/Xm2ZdX2r C2: voidclients-32776[.]portmap[.]host:32776 (IP: 193.161.193.99)
# StagedC2 config observed at Wed Sep 2 06:29:02 2026 UTC, located at hXXps://pastebin[.]com/raw/VBLkqjWU C2: hokemon999-37787[.]portmap[.]host:37787 (IP: 193.161.193.99)
# StagedC2 config observed at Wed Sep 2 09:35:05 2026 UTC, located at hXXps://pastebin[.]com/raw/zitg56xy C2: iwmi-36272[.]portmap[.]host:36272 (IP: 193.161.193.99)