Indicators of Compromise

470,256 total indicators across 20 types

SHA-256 Hash

TLP:CLEAR

434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

twitck.com

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

referfile.com

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

ch.threema.app

50% confidence

Added

2026-08-12

SHA-256 Hash

TLP:CLEAR

f1a54dca2fdfe59ec3f537148460364fb5d046c9b4e7db5fc819a9732ae0e063

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

appswonder.info

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

www.patchworkdigital.co.uk

The Evolution of ClickFix: From Cleartext to Server Side Polymorphism

75% confidence

Added

2026-05-26

Domain

TLP:CLEAR

thepatchworkstore.com

domains observed being used in these malware

70% confidence

Added

2026-05-06

Showing 1–8 of 8