Indicators of Compromise

Domain

TLP:CLEAR

ajgroupuae.usersatisfactionlab.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

vresortsliving.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

usersatisfactionlab.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

reliablecontinuitysolutions.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

evergreenhostingoptions.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

innovativegrowthstrategy.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

solidhostingservices.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

sustainablegrowthlaunch.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

testserveren.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

esignidentification.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

employeehandbookcompliance.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

q1evaluationperformance.net

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

designenhancessatisfaction.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

sohantraders.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

assessmentevaluationreport.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

company.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

satoriestate.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

consistenthostinghub.de

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

corporatetermscompliance.com

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

barifurniture.net

Inside a Global Procurement-Themed AiTM Phishing Campaign

75% confidence

Added

2026-07-23

Domain

TLP:CLEAR

muchino.database-server.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

nnqsy.secureenvirotrust.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

noanme.courtfilecloud.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

y.k5l1m.cfd

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

rexjf.digitaltrustbase.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

zrqdi.dynamicgrowthsystems.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

valid.seashellshoetreasures.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

woovw.maximizevisibility.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

zpma.uscourtdocuments.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

tlmsh.germanidentityhub.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

towbb.digitalproficiency.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

qmduj.smoothhost.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

office.bureaucloudservices.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

unix.wearableartbags.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

oztff.valueguardians.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

msg.uscourtfiles.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

jeny.ggsuitauth.site

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

irigc.precisionontheweb.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

lifeofa.k5l1m.cfd

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

bafybeias2uivmggzl2gqjipqgcarbgyvakvk6yljxbcv4a3qroxcujzqaq.ipfs.w3s.link

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

hbfnq.strongsystems.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

m.chantstraditionnels.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

don.feiracultural.de

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

dr.k5l1m.cfd

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

chris1.k5l1m.cfd

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

chr.v0k3.space

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

chris.ggsuitauth.site

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

chr.authgsyuuite.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

empire.appdocstorage.com

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21

Domain

TLP:CLEAR

brenda.5hawb1t.site

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

75% confidence

Added

2026-05-21