live #darkcomet #C2 server
51.158.54[.]228:3847

confirmed 2026-03-14

live #darkcomet #C2 server
51.158.54[.]228:1839

confirmed 2026-03-14

live #darkcomet #C2 server
212.64.210[.]140:4930
x021d3eon[.]localto[.]net
confirmed 2026-01-26

live #darkcomet #C2 server
212.64.215[.]198:2595

confirmed 2026-01-09

live #darkcomet #C2 server
212.64.215[.]198:6748

confirmed 2026-01-08

live #darkcomet #C2 server
212.64.215[.]198:1829

confirmed 2026-01-07

live #darkcomet #C2 server
212.64.215[.]198:8377

confirmed 2026-01-06

live #darkcomet #C2 server
212.64.215[.]198:6735
tx4h1lbrn[.]localto[.]net
confirmed 2026-01-06
live #darkcomet #C2 server
85.105.91[.]10:1998
ersel33640[.]freedynamicdns[.]net
confirmed 2025-12-24

The #DarkComet spyware for Windows, once linked to the CIA in #WikiLeaks’ Vault 7 leak, is back and now targeting your crypto wallets and data through fake Bitcoin wallet and trading apps.

Read: https://hackread.com/darkcomet-spyware-fake-bitcoin-wallet-apps/

#CyberSecurity #Bitcoin #Crypto #Trading #Malware

DarkComet Spyware Resurfaces Disguised as Fake Bitcoin Wallet

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread