Domain

onedown[.]gesecole[.]net

Confidence: ai extracted

VirusTotal ↗ URLScan ↗

Linked Entities 15

malware PlugX threat actor MUSTANG PANDA threat actor APT41 threat actor APT10 threat actor APT19 threat actor UNC6384 threat actor APT29 threat actor UNC2452 threat actor OilRig threat actor LOTUS PANDA malware EnvyScout malware WINELOADER malware GRAPELOADER malware TONEDEAF malware Emissary

Source Articles 1

PlugX Meeting Invitation via MSBuild and GDATA

lab52 Feb 26, 2026