# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Alliases: WizardUpdate

# Reference: https://www.microsoft.com/security/blog/2022/02/02/the-evolution-of-a-mac-trojan-updateagents-progression/

d35ep4bg5x8d5j.cloudfront.net
d7rp2fva69arq.cloudfront.net
daqi268hfl8ov.cloudfront.net
dpqsxofvslaxjaiyjdok.s3.amazonaws.com
ekogidekinvgwyzmeydw.s3.amazonaws.com
events.optimizerservices.com
grxqorfazgqbmzeetpus.s3.amazonaws.com
lnzjvpeyarvvvtljxsws.s3.amazonaws.com
oldbrlauserz.s3.amazonaws.com
phdhrhdsp.s3.amazonaws.com
qqirhvehhnvuemxezfxc.s3.amazonaws.com
svapnilpkasjmwtygfstkhsdfrraa.s3.amazonaws.com
tnkdcxekehzpnpvimdwquzwzgpehlnwgizrlmzev.s3.amazonaws.com
xyxeaxtugahkwrcvbzsw.s3.amazonaws.com

# Reference: https://twitter.com/sysopfb/status/1532442456343691273
# Reference: https://www.jamf.com/blog/updateagent-adapts-again/
# Reference: https://gist.github.com/sysopfb/19abb48672e940e778ec591c5028230c

d2u7maudpwyo3n.cloudfront.net
qolveevgclr.activedirec.com
shhxpxrfcuocurentw.s3.amazonaws.com
vrdazgynlt.comsysbuf.com
vzhqu.snapitool.com
xrcpsvz.snapitool.com
