https://bbs.microsoftsync.net/YSGi
Classification: Malicious
https://bbs.microsoftsync.net/YSGi is a malicious URL. Linked to Cobalt Strike malware. 346 sightings from Threat Observatory, last seen 2026-04-18.
Current activity
- Offline — no longer resolving. Last online 2026-09-15 23:03:02.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR and NL, across healthcare networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Cobalt strike | Maltiverse Threat Observatory | 2026-04-18 05:27:30 | 2026-04-18 07:27:30 | botnet country_code:br country_code:nl industry:healthcare-and-pharmaceutical malicious-activity | S0154 Cobalt Strike |
URL information
- Hostname
- bbs.microsoftsync.net
- Domain
- microsoftsync.net
- TLD
- net
- SHA-256
9e3a54a2b421b5fba4770a020ae82c37d82bf6680ceacdad2af0408728075bf2- First indexed
- 2026-04-22 01:39:21
- Last updated
- 2026-09-15 23:03:02
- Last online
- 2026-09-15 23:03:02