Repository navigation
nikke_malware v1.3.4
- Fix: false
INFECTEDfrominsightjs.org. That domain now belongs to a third party running a warning page on Cloudflare, but the checker still treated whatever it resolved to as the attacker's server, so any connection to that shared Cloudflare address was flagged. Onlyinsightjs.comaddresses and the known C2 IP count now. - Fix:
-Blockno longer firewallsinsightjs.org's Cloudflare addresses, which could break unrelated sites. It stays in the hosts sinkhole. - A closed connection (
TimeWait, or no owning program) to the C2 is nowSUSPICIOUS, not an active infection.
Download: nikke_malware-kit.zip below, then open START-HERE.txt.