• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    HTTP request to fsputnik/uasputnik ClickFix TDS lure infrastructure

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated 29 days ago•0•0•2

    Detects outbound network requests to known infrastructure associated with the ClickFix Traffic Direction System (TDS), specifically targeting domains 'fsputnik.com' and 'uasputnik.com'. The rules monitor for requests to specific lure pages, tracker files, and established IP connections used by this malicious campaign to deliver fraudulent prompts or lures to victims.

    Suricata

    Tags

    T1189 - Drive-by CompromiseT1608 - Stage CapabilitiesNetwork ConnectionNetwork Connection OutboundHTTP RequestIDS IPS AlertNetwork GenericSuricata IDSSnort IDSHTTPTrojan Activity

    Found in

    • Psychedelic Stealer Campaign Targeting Ukraine via ClickFixLast updated Sep 27, 2026
    • Psychedelic Stealer Campaign Targeting Ukraine via ClickFixLast updated Sep 27, 2026
    • Psychedelic Stealer Campaign Targeting Ukraine via ClickFixLast updated Sep 27, 2026
    • Psychedelic Stealer Campaign Targeting Ukraine via ClickFixLast updated Sep 27, 2026
    • Psychedelic Stealer Campaign Targeting Ukraine via ClickFixLast updated Sep 27, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?