# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://labs.sentinelone.com/new-macos-malware-xcodespy-targets-xcode-developers-with-eggshell-backdoor/

alinbox.co
appmarket.co
cralev.me
everestnote.com
liveupdate.cc
recentnews.cc
suppro.co
truckrental.cc

# Reference: https://threatfox.abuse.ch/browse/tag/EggShell/

138.68.98.0:8112
