write.it

Domain

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 28, 2026

Last Seen

July 30, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

No context provided to confirm attacker control.

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

OpenAI Launches GPT-5.4-Cyber Amidst Cybersecurity Arms Race

Apr 14·1370 sources

Related Articles (2)

Agent Intrusion Technical Timeline

huggingface.co·Jul 30

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

Huggingface.Co·Jul 28

Related Entities

Zero-day Exploit Data Exfiltration Supply Chain Attack OpenAI CWE-94 - Code Injection CWE-78 - OS Command Injection CWE-200 - Exposure of Sensitive Information T1059.006 - Python T1071 - Application Layer Protocol T1041 - Exfiltration Over C2 Channel T1059.004 - Unix Shell T1059 - Command and Scripting Interpreter