According to Foresight News, the National Cyber and Information Security Information Notification Center has identified a series of malicious foreign websites and IP addresses. These have been used by overseas hacker groups to launch cyber attacks against China and other countries. The malicious websites and IPs are closely linked to specific Trojan programs or their control terminals. Among these, one malicious address is associated with the Nanocore virus family, which can be expanded to perform various harmful functions, including cryptocurrency mining and ransomware attacks.