The National Cybersecurity and Information Security Information Notification Center has discovered a batch of overseas malicious websites and malicious IPs. Overseas hacker organizations are continuously launching cyber attacks against China and other countries using these websites and IPs. These malicious websites and IPs are closely associated with specific Trojan programs or Trojan control endpoints. One particular malicious address is linked to the Nanocore virus family samples, which can expand to implement various malicious functions, such as cryptocurrency mining, ransomware attacks, and more.