Indicators of Compromise

Domain

TLP:CLEAR

blueboxsourcing.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

blueboxsourcing.com

75% confidence

Added

2026-07-26

URL

TLP:CLEAR

http://bluebox10546.s3.us-west-004.backblazeb2.com/sa/88W3X81EN/cettj34c.txt

IOCs related to distribution of POWERSTAR PowerShell backdoor by Charming Kitten

90% confidence

Added

2026-05-06

URL

TLP:CLEAR

https://s3.us-west-004.backblazeb2.com/bluebox10546/k41we/k24510.txt

IOCs related to distribution of POWERSTAR PowerShell backdoor by Charming Kitten

90% confidence

Added

2026-05-06

URL

TLP:CLEAR

https://bluebox10546.s3.us-west-004.backblazeb2.com/share/Us-China.pdf

IOCs related to distribution of POWERSTAR PowerShell backdoor by Charming Kitten

90% confidence

Added

2026-05-06

URL

TLP:CLEAR

https://bluebox10546.s3.us-west-004.backblazeb2.com/k41we/btw74c.txt

IOCs related to distribution of POWERSTAR PowerShell backdoor by Charming Kitten

90% confidence

Added

2026-05-06

URL

TLP:CLEAR

https://s3.us-west-004.backblazeb2.com/bluebox10546/k41we/bts74e.txt

IOCs related to distribution of POWERSTAR PowerShell backdoor by Charming Kitten

90% confidence

Added

2026-05-06

Email Address

TLP:CLEAR

aocpocqotox@onionmail.org

Ransomware.live IOC (Bluebox): aocpocqotox@onionmail.org

75% confidence

Added

2026-05-05