Indicators of Compromise

Domain

TLP:CLEAR

css.xjsx.lol

ThreatFox: Unknown Webinject

85% confidence

Added

2026-08-06

Domain

TLP:CLEAR

cloudsendhub.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

syncdatavault.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filevelvettractor.sbs

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filerubyfolder.sbs

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filecrimsonsignal.online

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

fileoceanhammer.sbs

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filemarblegarden.sbs

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

cloudfilebridge.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

orangesmartfile.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filecopperbasket.sbs

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

filecedarwallet.online

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

mangocloudfile.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

lemonfilewave.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

limefilescope.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

applefilevault.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

bananafastfile.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

Domain

TLP:CLEAR

apricotfilepoint.com

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

75% confidence

Added

2026-08-06

URL

TLP:CLEAR

https://gn-winch-wisteria-cloak.s3.ap-southeast-1.amazonaws.com/FlUo6?email=redacted@abuse.ionos.com

PhishTank: https://gn-winch-wisteria-cloak.s3.ap-southeast-1.amazonaws.com/FlUo6?email=redacted@abuse.ionos.com

90% confidence

Added

2026-08-05

URL

TLP:CLEAR

https://distribution-reprogramation.com/cloaking/parked.html

PhishTank: https://distribution-reprogramation.com/cloaking/parked.html

90% confidence

Added

2026-08-05

MD5 Hash

TLP:CLEAR

59fe1ef7707fe497d89f34505222862f

Targeted Attack on Government Entities in the Middle East | Part 2

75% confidence

Added

2026-08-04

Domain

TLP:CLEAR

contacts.ftabnews.com

Targeted Attack on Government Entities in the Middle East | Part 2

75% confidence

Added

2026-08-04

Domain

TLP:CLEAR

ftabnews.com

Targeted Attack on Government Entities in the Middle East | Part 2

75% confidence

Added

2026-08-04

SHA-256 Hash

TLP:CLEAR

789fd11285642861190dc074c1e9a5957073f1a2afebd5160f9cc907f7f320bd

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

5c2fe953da53da66fbcbb3be0fd6b63907c10714c337f287b2fc258857bbff6d

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

3b3eaea783fd6dab90f0408274bf8a9c49adbdc70c0efd70658d65b0e1684a3f

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

3b0c658ebaa2bae80af97f390b9b2bb20a2f815eb584b2251255e84da4fa669d

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

32529043d15e9111ba284f1d8a9e4b3f58e071c6b69c8f271d4d02feacd44e66

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

0637069c7052118fd5c0f1113541bdd35e5f71cd9689f2516045da152c6fa8d9

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

f46c01a5be2e08e36d4ec3302a8650a6ed25ec14

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

fee6806c96f87bf1e240a2eb6fd7e045101d58d3

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

cert.hypersnet.com

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

db11ff3f37a8b2aa25c480871504b886a6364167ecb501eacf7345f6bbf9582b

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

cac1f37beaa814461f7709a073aeec468c74e5d70f7d693a9e367ece4a3a78be

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-256 Hash

TLP:CLEAR

c84542ac30cbe9bb8bd648bad323c37801023bf9451c1c0990452466e084340f

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

ee287d6a09295502ab2407aec336f9f0d8477d68

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

7a14a99d70d42d3f7bf72f843185fc07

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

7cbc51ada1a4aec88660ec32c408114b

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

97124a93766be732e8fef5a56a5346a2

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

b776eb638fbb535708fb92b12fcc1731

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

c99f29ac08454855b3d538960bb2f34f

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

1099bf51e53bd5fb32401edb4e0be841d8486b19

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

2377c47cfde148c2140faa7105628174f9c4d56d

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

577b1cc894636f4ac5ad670b0079b9b7ade137c3

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

86ee99f293a30720bcc898a4a8e391f93fb9be95

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

c1f16e31ae71372ee45fa6fd6927c7b887a4e3f2

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

SHA-1 Hash

TLP:CLEAR

ccb2002fe8f5cc1f511d52309625b52d1c507421

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

3f60d53a2b5737d77e058d9e33cbe9eb

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

68926e6c958562deaae35de3d9f59de3

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22

MD5 Hash

TLP:CLEAR

78a4f8574830bf7fbaf63d7da09be2b8

Targeted Attack on Government Entities in the Middle East | Part 1

75% confidence

Added

2026-07-22