Indicators of Compromise

https://aware-cr1.com/api/beacon

ThreatFox: Vidar

dlock.liveblog365.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

deadlockblog.great-site.net

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

deadlockblog.medianewsonline.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

deadblogdbdu5wprek7wa2o4ce7rnt6u6ntqeud3hzjjcveosgpsqqqd.onion

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

a1fdf65020ce4a0f0940c793c6425baf8a0b994ec48b9baaf72788661a9d29f4

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

polygon.meowrpc.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

deadlock.liveblog365.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

http://1rpc.io/matic

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

http://aware-research-270929.framer.app/

OpenPhish: http://aware-research-270929.framer.app/

https://aware-research-270929.framer.app/

PhishTank: https://aware-research-270929.framer.app/

https://aware-university-930573.framer.app/

PhishTank: https://aware-university-930573.framer.app/

https://securityawareness.cc/landing/form/80f25bb5-d42e-4d41-aa93-1ce79589c881

OpenPhish: https://securityawareness.cc/landing/form/80f25bb5-d42e-4d41-aa93-1ce79589c881

https://aware-assistant-407030.framer.app/

PhishTank: https://aware-assistant-407030.framer.app/

https://unaware-violet-zdvlmj66.edgeone.dev/

OpenPhish: https://unaware-violet-zdvlmj66.edgeone.dev/

https://aware-seat-774154.framer.app/

OpenPhish: https://aware-seat-774154.framer.app/

https://aware-cr1.com/api/gate

ThreatFox: Vidar

https://perplexity-ai.online/search/

Chromium extension uses AI‑related branding to redirect browser search

https://perplexity-ai.online/search?output=firefox&q=

Chromium extension uses AI‑related branding to redirect browser search

https://perplexity-ai.online/favicon.ico

Chromium extension uses AI‑related branding to redirect browser search

http://perplexity-ai.online/search/

Chromium extension uses AI‑related branding to redirect browser search

http://perplexity-ai.online/*

Chromium extension uses AI‑related branding to redirect browser search

http://perplexity-ai.online/

Chromium extension uses AI‑related branding to redirect browser search

perplexity-ai.online

Chromium extension uses AI‑related branding to redirect browser search

homeinspectionsdelaware.com

ThreatFox: Unknown Stealer

http://homeinspectionsdelaware.com/curl/75ddfbae4fcacede52ef513ce634f82ad3d8358984b0bd49756cc8c50a55d501

ThreatFox: Unknown Stealer

liftaware.com

The Evolution of ClickFix: From Cleartext to Server Side Polymorphism

0x1x2x3.top

Untangling a Linux Incident With an OpenAI Twist (Part 2)

781c19b56fbdb17284707f9026e107f639e5447df7df3b248a5d5a50c4b0806c

Untangling a Linux Incident With an OpenAI Twist (Part 2)

comp.id

Chasing an Angry Spark

storewebzone.net

Chasing an Angry Spark

server-sys.com

Chasing an Angry Spark

068ab3cb0f28916ea64c27ea58a680c8

Chasing an Angry Spark

44a77bc78986f910d98491c0006b7be5

Chasing an Angry Spark

592d663ad71575e4c52e0c810008c3c2

Chasing an Angry Spark

cc32c78022525f12f5f407f0e1291003

Chasing an Angry Spark

20f19a37e17772c38b6f89af40fa941d55bad9ffcf3b3382206a0cadfa937025

Chasing an Angry Spark

491870264fa2d666fb8859508a6a44b80bcb868e2f43c00f03199df2651c757d

Chasing an Angry Spark

96883abd45eca3f076f1d5e2a9e75e37b588a37a99fe42ec4bedd34f7926760e

Chasing an Angry Spark

9c492a39823aa0ff14f3131a2346f833827a1c423e77dcc9682bb939aea0e215

Chasing an Angry Spark

https://pick.storewebzone.net/assets/static/img/I4o8Pp_41.png

Chasing an Angry Spark

https://pick.storewebzone.net/prod/vUcLWuZF/8363/asb2dz_1dd4.php

Chasing an Angry Spark

pick.storewebzone.net

Chasing an Angry Spark

s13035516.server-sys.com

Chasing an Angry Spark

www.mediawareonline.it

download location

http://www.mediawareonline.it/yvg6cw

download location

adawareblock.com

MISP: adawareblock.com

delawarecorporatelaw.com

C2

awarepictures.com/dfv45

MISP: awarepictures.com/dfv45

a23640778b836420eecb5461938a98ad3588d2044359daf6b4b25ecaf35c996e

A cunning predator: How Silver Fox preys on Japanese firms this tax season