0xf9099d0d747368cce8C10226CC9AF2bFD4DDbCF4

Ethereum Address

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

September 21, 2026

Last Seen

September 21, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Used as a smart contract for C2 discovery by the malware

Checked against every article that reports it before entering the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Blockchain · 2

Web search · 2

Related Clusters (1)

New ChainScript RAT Exploits ClickFix Lures with Blockchain C2

Sep 21·4 sources

Related Articles (1)

ChainScript: the RAT that hides its command server inside a blockchain contract

Securityaffairs·Sep 21

Related Entities

Malware ClickFix campaign Polygon ChainScript EtherRAT Tsundere T1059.001 - PowerShell T1059.005 - Visual Basic T1071.001 - Web Protocols Windows Msiexec Node.exe