Indicators of Compromise

Domain

TLP:CLEAR

forklog.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

sam.hiv

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

node.exe

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Trojan.Mebromi

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

LITTLELAMB.WOOLTEA

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

PACLOUD.exe

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Trojan-SMS.AndroidOS.Agent.ao

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Trojan-SMS.AndroidOS.FakeInst

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Trojan-SMS.AndroidOS.OpFake

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

113.0.0.0

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

CompanyName.pdf

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

www.acmeinc.buzz

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

ses.amazonaws.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

iam.amazonaws.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

ec2.amazonaws.com

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

5.15.153.1

50% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://share-eu1.hsforms.com/1wg25r1Z-R5GkhY6k-xGzOg2dvcv5

50% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://technicaldevelopment.industrialization.buzz/?o0B=RLNT

50% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://asdrfghjk3wr4e5yr6uyjhgb.mhp-hotels.buzz/?Nhv3zM=xI7Kyf

50% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://docusharepoint.fundament-advisory.buzz/?3aGw=Nl9

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

91.92.253.66

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

AdDisplay.Ashas

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

DEADEYE.EMBED

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

DEADEYE.APPEND

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

workmail.amazonaws.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

sts.amazonaws.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

signin.amazonaws.com

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

128.0.0.0

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

129.0.0.0

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Agent.btz

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Backdoor.Oldrea

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

Trojan.Karagany

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

daily.dev

50% confidence

Added

2026-08-08