The National Network and Information Security Information Notification Center's official account disclosed that a number of overseas malicious URLs and IP addresses were discovered. Overseas hacker groups used these URLs and IP addresses to continuously launch cyber attacks on China and other countries. These malicious URLs and IP addresses are closely related to specific Trojan programs or Trojan program control terminals. One of the malicious addresses is associated with a sample of the Nanocore virus family, which can be extended to realize various malicious functions, such as mining cryptocurrency, ransomware attacks, etc.