Skip to content
Derp.ca
Malware
Ransomware
Research
About
Malware
Ransomware
Research
About
Home
/
TONESHELL
TONESHELL
Linked Threat Actors
MUSTANG PANDA
C2 Infrastructure
ISP/Residential
87%
Hosting/VPS
12%
Unknown
1%
Last 7 days
Jun 5, 2026
C2 Hosts:
142
Daily C2 host counts for the last 7 days
Date
C2 Hosts
Jun 5, 2026
142
Further Reading
blog.sekoia.io
opens in a new tab
blog.sekoia.io
csirt-cti.net
opens in a new tab
csirt-cti.net
github.com
opens in a new tab
github.com
hitcon.org
opens in a new tab
hitcon.org
hunt.io
opens in a new tab
hunt.io
pyaeheinnkyaw.com
opens in a new tab
pyaeheinnkyaw.com
securelist.com
opens in a new tab
securelist.com
unit42.paloaltonetworks.com
opens in a new tab
unit42.paloaltonetworks.com
ibm.com
opens in a new tab
ibm.com
trendmicro.com
opens in a new tab
trendmicro.com
welivesecurity.com
opens in a new tab
welivesecurity.com