of the domain and associated IP, combined with user education and robust mobile security controls, are essential to prevent compromise. Continuous monitoring of related indicators (IP, C2 domains, similar sub‑domains) should be part of any threat‑intelligence feed to keep defenses up‑to‑date. Prepared by: Cyber‑Threat Intelligence Team Date: 13 April 2026