Golden Finance reported that the National Network and Information Security Information Reporting Center discovered a batch of overseas malicious URLs and malicious IPs. Overseas hacker organizations use these URLs and IPs to continuously launch cyber attacks against China and other countries. These malicious URLs and IPs are all related to specific Trojan programs. Or the Trojan program control end is closely related. One of the malicious addresses is related to the Nanocore virus family sample, which can be expanded to implement various malicious functions, such as mining cryptocurrency, ransomware attacks, etc.