other

РУБЛЁВКА TDS

Web-lure management panel that configures per-domain clipboard commands and records visitor progression through a lure, polling its visitor records every two seconds.

Known aliases

Rublevka TDS

Relationships

No evidence-backed relationships are recorded.

Current clusters

security2 publishers

Compromised Ukrainian business sites are serving a ClickFix lure that installs through msiexec

Arctic Wolf Labs found injected iframes on real Ukrainian business sites showing a Ukrainian-language fake Cloudflare check that copies a Windows Installer command for the visitor to paste into Run. Its exposed panel logged 557 views.

Publishers:arcticwolf.comthehackernews.com

Reality

Evidence70
Adoption42
Hype gap+5
Incentives62
Confidence66