Skip to content

Coreshell

Also known as: SOURFACE

Linked Threat Actors

APT28

C2 Infrastructure

Hosting/VPS 80%
Unknown 20%

Last 7 days

Jun 19, 2026
C2 Hosts: 5

Further Reading