s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

MB-0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b high

📛 Threat Title

Unknown: Overdue Balance Payment Confirmation.js

Category: Unknown Published: Source updated: First seen: Last updated: Source: Abuse.ch

Description

File type: js. Size: 1206588 bytes. Tags: js. Reporter: lowmal3. First seen: 2026-05-15 07:27:15.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain confirmation.js VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/confirmation.js

IOC database

Type
domain
Value
confirmation.js
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat MB-0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/confirmation.js

hash_sha256 0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b VT: VT base fetch failed: HTTPError: 429 Too Many Requests for files/0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b
1 feed

IOC database

Type
hash_sha256
Value
0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b
First seen
Last seen
Attached to this threat
Appears in
2 threats
Description
Unknown

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 1 threat-intel feed vendor: Abuse.ch. Open in Threat Hunt →

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for files/0cc72c9fc27a9e4ced212fc1dc0d61fb5995a49644455bfdd98443feb3b0155b

hash_sha1 5db565c28228716020b6da120b8dbd306ae95cc5 VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/5db565c28228716020b6da120b8dbd306ae95cc5
1 feed

IOC database

Type
hash_sha1
Value
5db565c28228716020b6da120b8dbd306ae95cc5
First seen
Last seen
Attached to this threat
Appears in
2 threats

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 1 threat-intel feed vendor: Abuse.ch. Open in Threat Hunt →

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/5db565c28228716020b6da120b8dbd306ae95cc5

hash_md5 0e51dbbd6855cf64c10948980e780d10 VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/0e51dbbd6855cf64c10948980e780d10
1 feed

IOC database

Type
hash_md5
Value
0e51dbbd6855cf64c10948980e780d10
First seen
Last seen
Attached to this threat
Appears in
2 threats

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 1 threat-intel feed vendor: Abuse.ch. Open in Threat Hunt →

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/0e51dbbd6855cf64c10948980e780d10

References (1)

Remediations (10)

  • Common JavaScript Vulnerabilities and How to Avoid Them - Codacy
    web:blog.codacy.com

    We look at some of the most common JavaScript vulnerabilities that software developers face and discuss solutions and remediation methods for them.

  • Fake shipping notification emails and text messages: What you need to ...
    web:consumer.ftc.gov

    When you order something online, you might get several emails or text messages about your order: Confirming your order. Telling you it shipped. Saying it's out for delivery. Notifying you about delivery. Did you know that scammers send fake package shipment and delivery notifications to try to steal people's personal information — not just at the holidays, but all year long? Here's what you ...

  • Intelligence Brief - A Supply Chain Compromise of Popular NPM Packages
    web:cstromblad.com

    The browser-specific targeting demonstrates evolving threat actor tactics that balance operational security with targeted impact. As cryptocurrency and Web3 applications increasingly rely on NPM packages, similar attacks targeting the intersection of traditional web development and blockchain technologies are likely to increase.

  • 11.2 define the mitigation · Issue #142 · w3c/secure-payment ... - GitHub
    web:github.com

    The example was misleading, as it is already explicitly disallowed by the spec (see 4.1.4, step 8). Removing it hopefully makes it clear that 11.2 is about a general class of risk that SPC (and WebAuthn) has as a technology, not a specific attack with a specific mitigation . See #142 stephenmcgruer mentioned this issue Mar 2, 2022 [Spec] Remove example from 11.2 #176 Merged stephenmcgruer added ...

  • Use Remediations to Detect and Fix Support Issues - Microsoft Intune
    web:learn.microsoft.com

    Learn more about Remediations in Microsoft Intune, including what Remediations are and view any prerequisites and licensing requirements. Also, learn how to deploy built-in and custom remediation scripts, and learn how to monitor your scripts.

  • Don't Get Trapped by the Overdue Invoice Email Scam
    web:malware-guide.com

    Be careful if you get an email saying you have an " Overdue Invoice" and need to pay it urgently to avoid legal trouble. This email is actually a trick called phishing. In the Overdue Invoice Email Scam, the email pretends to be from a business partner or company you know. They thank you for your partnership and say you have an unpaid invoice. They tell you to pay it by opening an attached ...

  • Unmasking the "Overdue Invoice" Phishing Scam - MalwareTips Blog
    web:malwaretips.com

    The " Overdue Invoice" phishing scam threatens businesses and individuals handling payments . This guide outlined how to recognize fake invoice emails, respond if targeted, and implement practices to avoid becoming a victim.

  • Windows Analysis Report Overdue Balance Payment Confirmation.js
    web:www.joesandbox.com

    Queries the volume information (name, serial number etc) of a device Sigma detected: Common Autorun Keys Modification Sigma detected: Potential Binary Or Script Dropper Via PowerShell Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript Suricata IDS alerts with low severity for network traffic Yara detected Credential Stealer

  • Overdue Payment Email Scam - Removal and recovery steps (updated) - PCrisk
    web:www.pcrisk.com

    What kind of scam is " Overdue Payment "? We have reviewed the email and found that it is an advance-fee scam designed to manipulate victims into providing personal information and (or) making fraudulent payments . Such emails usually contain fake claims to deceive recipients.

  • CVE-2024-3566 Impact, Exploitability, and Mitigation Steps | Wiz
    web:www.wiz.io

    CVE-2024-3566: Node.js vulnerability analysis and mitigation Overview CVE-2024-3566 is a command injection vulnerability that affects Windows applications that indirectly depend on the CreateProcess function.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.