The original post: /r/cybersecurity by /u/Sloky on 2024-12-22 12:22:29.

Hi everyone and Happy Holidays!

Just wrapped up a weekend investigation into Amadey Loader’s infrastructure! Started with 2 domains and ended up uncovering unique IPs and domains through pattern analysis.

• High concentration in Russia/China hosting
• Consistent panel naming patterns
• Some infrastructure protected by Cloudflare

https://intelinsights.substack.com/p/mapping-amadey-loader-infrastructure