Indicators of Compromise

Domain

TLP:CLEAR

KLYYMMDDhhmmss.dat

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.mond

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

b525837273dde06b86b5f93f9aeC2C29665324105b0b66f6df81884754f8080d

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

1a30d6cdb0b98feed62563be8050db55ae0156ed437701d36a7b46aabf086ede

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

b452C2da7c012eda25a1403b3313444b5eb7C2c3e25eee489f1bd256f8434735

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cmailer.pro

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

mylingocoin.com

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://cmailer.pro:80/upload

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.google.docs.offline

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CAYYMMDDhhmmss.dat

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

setting.db

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.system.updater.plist

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.system.updater

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

kern.boottime

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

common.unzipFile

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

common.go

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

exe.go

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

login.keychain

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.google.docs.offline.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Logs.db

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

supportzm.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

zmsupport.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

common.Start

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

inject.go

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.os.config

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

breakdream.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

dreamdie.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

support-zoom.us

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Breacher.ai

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CacheLogs.db

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://mylingocoin.com/audio/fix/6454694440

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

zoom.uswe05.us

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.os.receipts

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

TCC.db

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

104.145.210.107

Sapphire Sleet Targets macOS

75% confidence

Added

2026-05-29

IPv4 Address

TLP:CLEAR

83.136.210.180

Sapphire Sleet Targets macOS

75% confidence

Added

2026-05-29

IPv4 Address

TLP:CLEAR

83.136.208.48

Sapphire Sleet Targets macOS

75% confidence

Added

2026-05-29

IPv4 Address

TLP:CLEAR

83.136.208.246

Sapphire Sleet Targets macOS

75% confidence

Added

2026-05-29

IPv4 Address

TLP:CLEAR

83.136.209.22

Sapphire Sleet Targets macOS

75% confidence

Added

2026-05-29

URL

TLP:CLEAR

https://microsmeet.xyz/api/mn/6676097740/update

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

konizia.com

ThreatFox: Unknown malware

65% confidence

Added

2026-05-21

Domain

TLP:CLEAR

teams.livesweb.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

yujinp.xyz

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

teams.live05ms.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

live05ms.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

teams.onlivecall.com

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

teams.msonlive.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

msonlive.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

editorfxmedia.com

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21

Domain

TLP:CLEAR

techevent.us

ThreatFox: Unknown malware

85% confidence

Added

2026-05-21