# StagedC2 config observed at Wed Sep 2 18:37:05 2026 UTC, located at hXXps://pastebin[.]com/raw/Dy7FEhk0 C2: 0[.]tcp[.]sa[.]ngrok[.]io:00000 (IP: 56.124.50.97)
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
# StagedC2 config observed at Wed Sep 2 18:37:05 2026 UTC, located at hXXps://pastebin[.]com/raw/Dy7FEhk0 C2: 0[.]tcp[.]sa[.]ngrok[.]io:00000 (IP: 56.124.50.97)
# StagedC2 config observed at Wed Sep 2 19:48:02 2026 UTC, located at hXXps://pastebin[.]com/raw/BMSv46Db C2: 98[.]130[.]142[.]217:4560
# StagedC2 config observed at Wed Sep 2 19:44:05 2026 UTC, located at hXXps://pastebin[.]com/raw/uH42c9eK C2: 193[.]161[.]193[.]99:62662
# StagedC2 config observed at Wed Sep 2 20:18:04 2026 UTC, located at hXXps://pastebin[.]com/raw/vYA6bxtq C2: 0[.]tcp[.]sa[.]ngrok[.]io:00000 (IP: 56.125.42.136)
# StagedC2 config observed at Wed Sep 2 21:08:05 2026 UTC, located at hXXps://pastebin[.]com/raw/SbEcQ5Tw C2: 0[.]tcp[.]sa[.]ngrok[.]io:00000 (IP: 56.124.50.97)
# StagedC2 config observed at Wed Sep 2 21:19:04 2026 UTC, located at hXXps://pastebin[.]com/raw/rzri0rYm C2: 85[.]11[.]167[.]105:7000
# StagedC2 config observed at Thu Sep 3 03:14:04 2026 UTC, located at hXXps://pastebin[.]com/raw/0d1cyWp5 C2: dddawdd1234-59664[.]portmap[.]host:59664 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 05:37:02 2026 UTC, located at hXXps://pastebin[.]com/raw/e8wDKxMF C2: dddawdd1234-59664[.]portmap[.]host:59664 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 09:35:06 2026 UTC, located at hXXps://pastebin[.]com/raw/L8xFyMEG C2: dddawdd1234-49556[.]portmap[.]host:49556 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 10:49:03 2026 UTC, located at hXXps://pastebin[.]com/raw/njVRYNA8 C2: du5k2be-52401[.]portmap[.]host:52401 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 11:53:04 2026 UTC, located at hXXps://pastebin[.]com/raw/F3aWPzw8 C2: dddawdd1234-54671[.]portmap[.]host:54671 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 12:20:04 2026 UTC, located at hXXps://pastebin[.]com/raw/1hgE3WcE C2: dddawdd1234-59636[.]portmap[.]host:59636 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 12:51:02 2026 UTC, located at hXXps://pastebin[.]com/raw/SpVGVT7k C2: dddawdd1234-49019[.]portmap[.]host:49019 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 13:57:04 2026 UTC, located at hXXps://pastebin[.]com/raw/vMGL05YF C2: 5[.]tcp[.]eu[.]ngrok[.]io:19259 (IP: 3.64.4.198)
# StagedC2 config observed at Thu Sep 3 15:00:06 2026 UTC, located at hXXps://pastebin[.]com/raw/RKpkeBvc C2: 163[.]245[.]215[.]235:8848
# StagedC2 config observed at Thu Sep 3 19:51:04 2026 UTC, located at hXXps://pastebin[.]com/raw/f6ZxCNtH C2: yns2lyon-63466[.]portmap[.]host:63466 (IP: 193.161.193.99)
# StagedC2 config observed at Thu Sep 3 22:07:06 2026 UTC, located at hXXps://pastebin[.]com/raw/RLDfySbE C2: TUTORIALACCOUNTZIAD-36032[.]portmap[.]host:36032 (IP: 193.161.193.99)
# StagedC2 config observed at Fri Sep 4 02:07:02 2026 UTC, located at hXXps://pastebin[.]com/raw/8byLCqd9 C2: 24[.]152[.]39[.]244:3000
# StagedC2 config observed at Fri Sep 4 05:18:03 2026 UTC, located at hXXps://pastebin[.]com/raw/YEv6adNy C2: 0[.]tcp[.]ngrok[.]io:12345 (IP: 3.137.60.53)
# StagedC2 config observed at Fri Sep 4 10:13:03 2026 UTC, located at hXXps://pastebin[.]com/raw/kEsatCCu C2: 129[.]151[.]142[.]36:1705
# StagedC2 config observed at Fri Sep 4 16:47:05 2026 UTC, located at hXXps://pastebin[.]com/raw/GaAFd8LE C2: arksalter-36953[.]portmap[.]host:36953 (IP: 193.161.193.99)
# StagedC2 config observed at Fri Sep 4 17:10:06 2026 UTC, located at hXXps://pastebin[.]com/raw/5mE6iKTe C2: 31[.]76[.]31[.]241:1080