Known malicious kitcriticalphishing
ErrTraffic / Exvicy — injected WordPress loader, earlier template (YARA, Sekoia rule)
family: exvicy-errtraffic-2026-09
The earlier form of the ErrTraffic injected loader, detected with the rule Sekoia published in April 2026 (page anchor adapted to rendered pages).
Anchors
YARA ruleErrTraffic_Exvicy_WordPress_Injected_Loader
Provenance
Added: 2026-09-23 13:50
Structural match on the page itself. The current template is covered by the sibling rule in this family.
Sightings (8)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| www.local7.it | 522fe7b9… | https://www.local7.it/#html | yara | 2026-10-04 10:26 |
| fullpowerproperties.uk | 327dfa14… | https://fullpowerproperties.uk/#html | yara | 2026-10-03 10:27 |
| snalspisa.com | d84920c3… | https://snalspisa.com/#html | yara | 2026-10-03 04:30 |
| ciudadelacafamiv.com | 27753eae… | https://ciudadelacafamiv.com/#html | yara | 2026-10-02 10:26 |
| www.aerofisic.com.br | 0423984f… | https://www.aerofisic.com.br/#html | yara | 2026-09-25 14:20 |
| aerofisic.com.br | f0200aff… | https://aerofisic.com.br/#html | yara | 2026-09-25 14:20 |
| sohonailbar.es#html | 3e153c90… | https://sohonailbar.es#html | yara | 2026-09-23 13:50 |
| ambiancewax.com#html | ec4fc1b7… | https://ambiancewax.com#html | yara | 2026-09-23 13:50 |