Indicators of Compromise

Domain

TLP:CLEAR

Trojan.Win.Akira

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Trojan.Wins.Akira

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Trojan.Wins.Akira.ta

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Ransomware.Wins.Akira

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Ransomware.Wins.Akira.ta

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

sss.authorized-logins.net

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

8c935feec4bd05d5d918df308be417532fb42608fb989a08eab183e0ae699235

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

db972979d508e75fe730d3b72c2701470fbdaeaf8ebdd674744754fa44438ca5

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

f591275a8f014b29e567529d67c54eb7bb4473db1c38737d6bfd5b3d52c9344e

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

URL

TLP:CLEAR

http://thomphon.com/update.msi

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

authorized-logins.net

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

b6w9m2z5x8q1v3k.top

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

rotoa-upda-lo.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

sql-updater-service.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

upd-domain-goloro.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

updater-worelos.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

upscale-kolo.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

defs.updater-worelos.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

ftps.upd-domain-goloro.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

mailes.upd-domain-goloro.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

mails.updater-worelos.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

nano.upscale-kolo.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

php.authorized-logins.net

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

34d798a6c55e57ed0932b6499f4fbcb5454bdfca903307be101a0594b0ac07bc

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

MD5 Hash

TLP:CLEAR

dc96668d007df0a545bf1334e10e80fa

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

1e41c7bfaa6aa3b93b6cc024274a10e33f3e12fe7c98c1db387ef8927f9d1984

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-1 Hash

TLP:CLEAR

48d4872e8463d1ede1b93e3f6a6a8cc8c2cecde3

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

grande-luna.top

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

oeannon.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

human-check.top

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

update.update-fall.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

3f797a639bc855bc6d5471f327924b62d10900ddec49b970eca6604142bbb4be

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

cwrtwright.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

carrolc.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

59e3c4cb06331b4f2d78a9a0592f3747e573bd01c5a7650c26361d1e25520712

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

MD5 Hash

TLP:CLEAR

b148626849c11dd5b3230632a38a6302

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

SHA-1 Hash

TLP:CLEAR

e5c4e634b2f443f783cae1b5e8247a1069df0c9f

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

mail.authorized-logins.net

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

mueleer.com

New Backdoor May be Linked to Ransomware Access Broker

75% confidence

Added

2026-07-24

MD5 Hash

TLP:CLEAR

ca8646dfc88423bb9fffda811160cebe

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

febbaf5f08a8e0782ffcce8beef1f2b4e249a52b

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

172.96.137.160

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

a746da514c90f26a187a294fda7edc1b

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

193.242.184.150

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

ev2sirbd269o5j.org

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

a6df0b49a5ef9ffd6513bfe061fb60f6d2941a440038e2de8a7aeb1914945331

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

186b26df63df3b7334043b47659cba4185c948629d857d47452cc1936f0aa5da

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

1b9aa401457d29405c0bcf19cbf19a7028a0d214

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

109.205.195.211

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

f352cec89a56e23dae20cdd62df4d40bc7f22b5e

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

75% confidence

Added

2026-07-05