Known malicious kitcriticalphishing
ErrTraffic / Exvicy — injected WordPress loader, earlier template (YARA, Sekoia rule)
family: exvicy-errtraffic-2026-09
The earlier form of the ErrTraffic injected loader, detected with the rule Sekoia published in April 2026 (page anchor adapted to rendered pages).
Anchors
YARA ruleErrTraffic_Exvicy_WordPress_Injected_Loader
Provenance
Added: 2026-09-23 13:50
Structural match on the page itself. The current template is covered by the sibling rule in this family.
Sightings (4)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| www.aerofisic.com.br | 0423984f… | https://www.aerofisic.com.br/#html | yara | 2026-09-25 14:20 |
| aerofisic.com.br | f0200aff… | https://aerofisic.com.br/#html | yara | 2026-09-25 14:20 |
| sohonailbar.es#html | 3e153c90… | https://sohonailbar.es#html | yara | 2026-09-23 13:50 |
| ambiancewax.com#html | ec4fc1b7… | https://ambiancewax.com#html | yara | 2026-09-23 13:50 |