Known malicious kitcriticalphishing
Medtronic Brand Impersonation — index.js
family: medtronic-impersonation
Brand-impersonation phishing kit targeting Medtronic (the medical-device manufacturer). Vue.js SPA deployed across 4 sister hosts (medtronicwmn.com, medtronicwrr.cc, medtronicwrz.com, medtronicwtt.cc) under /static/js/ paths. Chunks reveal a fake-login + fake-account-detail flow (pages-login, pages-welcome, pages-account-account-detail, pages-Detail, pages-Particulars).
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 14:39
Anchor #1 of 3. index.1af48517.js — entry chunk, 17,113 nodes.
Sightings (11)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| medtronicwrr.cc | a095f609… | https://medtronicwrr.cc/static/js/index.1af48517.js | byte | 2026-05-24 11:54 |
| medtronicwtt.cc | 70e9b940… | https://medtronicwtt.cc/static/js/index.1af48517.js | byte | 2026-05-24 11:54 |
| medtronicwtt.cc | e0e048a1… | https://medtronicwtt.cc/static/js/index.1af48517.js | byte | 2026-05-24 11:33 |
| medtronicwrr.cc | fc9ed989… | https://medtronicwrr.cc/static/js/index.1af48517.js | byte | 2026-05-24 11:25 |
| medtronicwrr.cc | 8994a64d… | https://medtronicwrr.cc/static/js/index.1af48517.js | byte | 2026-05-24 11:21 |
| medtronicwmn.com | 1dd82ea4… | https://medtronicwmn.com/static/js/index.1af48517.js | byte | 2026-05-24 11:00 |
| medtronicwrz.com | 287d1177… | https://medtronicwrz.com/static/js/index.1af48517.js | byte | 2026-05-24 10:54 |
| medtronicwrz.com | 0b490709… | https://medtronicwrz.com/static/js/index.1af48517.js | byte | 2026-05-24 10:10 |
| medtronicwmn.com | ad1ff913… | https://medtronicwmn.com/static/js/index.1af48517.js | byte | 2026-05-24 10:01 |
| medtronicwmn.com | 1188c872… | https://medtronicwmn.com/static/js/index.1af48517.js | byte | 2026-05-24 09:59 |
| medtronicwrz.com | f67234a1… | https://medtronicwrz.com/static/js/index.1af48517.js | byte | 2026-05-24 09:43 |