domain=update-cdn-secure.net
ip=91.229.77.18
campaign=legacy-rat-2024
note=These IoCs are from historic threat intel feed and were auto-imported into this case workspace.