Skip to content

nikke_malware v1.3.4

Choose a tag to compare

@github-actions github-actions released this 04 Nov 00:32
· 23 commits to master since this release
d35ecd0
  • Fix: false INFECTED from insightjs.org. That domain now belongs to a third party running a warning page on Cloudflare, but the checker still treated whatever it resolved to as the attacker's server, so any connection to that shared Cloudflare address was flagged. Only insightjs.com addresses and the known C2 IP count now.
  • Fix: -Block no longer firewalls insightjs.org's Cloudflare addresses, which could break unrelated sites. It stays in the hosts sinkhole.
  • A closed connection (TimeWait, or no owning program) to the C2 is now SUSPICIOUS, not an active infection.

Download: nikke_malware-kit.zip below, then open START-HERE.txt.