Indicators of Compromise

474,233 total indicators across 20 types

Domain

TLP:CLEAR

kagomadb.com

Redirect page to ROMCOM lure site

70% confidence

Added

2026-05-06

URL

TLP:CLEAR

https://onedrive.live.com/?authkey=%21AAdO%2Di5%2DikrnuaA&id=79E2A760F4732317%21106&cid=79E2A760F4732317

OneDrive folder hosting ROMCOM downloader

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

netstaticsinformation.com

ROMCOM C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

redditanalytics.pm

ROMCOM modules

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

wirelessvezion.com

Suspected ROMCOM C&C (CHECK)

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

budgetnews.org

ROMCOM C&C

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

83448756a4cafbfd784d36add719cffa65b912e550d3a5fd63d407201c6ff94c

ROMCOM 3.0 downloader

70% confidence

Added

2026-05-06

Showing 1–7 of 7